Motorola netOctopus Agent 'nantsys.sys' Local Privilege Escalation Vulnerability

Bugtraq ID:	27175
Class:	Design Error
CVE:	CVE-2007-5761
Remote:	No
Local:	Yes
Published:	Jan 07 2008 12:00AM
Updated:	Jan 09 2008 05:19PM
Credit:	Stephen Fewer of Harmony Security is credited with the discovery of this vulnerability.
Vulnerable:	Motorola netOctopus 5.1.2 build 1011 Motorola netOctopus 5.1.2
Not Vulnerable:

Motorola netOctopus Agent 'nantsys.sys' Local Privilege Escalation Vulnerability

netOctopus is prone to a local privilege-escalation vulnerability.

Exploiting this issue could allow attackers to execute arbitrary code with elevated privileges.

This issue affects netOctopus 5.1.2; other versions may also be vulnerable.

Motorola netOctopus Agent 'nantsys.sys' Local Privilege Escalation Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Motorola netOctopus Agent 'nantsys.sys' Local Privilege Escalation Vulnerability

Solution:
The vendor has released fixes to address this issue. Please see the references for more information.

Motorola netOctopus Agent 'nantsys.sys' Local Privilege Escalation Vulnerability

References:

• netOctopus Product Page (Motorola)
  
• Removing the nantsys.sys Driver from netOctopus Windows Agents (Motorola)
  
• iDefense Security Advisory 01.07.08: Motorola netOctopus Agent MSR Write Privile (iDefense)
  
• Motorola netOctopus Agent MSR Write Privilege Escalation Vulnerability (iDefense)