Fortinet FortiClient 'fortimon.sys' Local Privilege Escalation Vulnerability

Bugtraq ID:	27776
Class:	Input Validation Error
CVE:	CVE-2008-0779
Remote:	No
Local:	Yes
Published:	Feb 13 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	Reversemode discovered this issue.
Vulnerable:	Fortinet FortiClient 2.0 Fortinet FortiClient 3.0 MR5 Patch 3
Not Vulnerable:	Fortinet FortiClient 3.0 MR6 Fortinet FortiClient 3.0 MR5 Patch 4

Fortinet FortiClient 'fortimon.sys' Local Privilege Escalation Vulnerability

Fortinet FortiClient is prone to a local privilege-escalation vulnerability because it fails to perform adequate device filtering.

Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful attacks will completely compromise affected computers.

Versions prior to FortiClient 3.0 MR5 Patch 4 are vulnerable.

Fortinet FortiClient 'fortimon.sys' Local Privilege Escalation Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Fortinet FortiClient 'fortimon.sys' Local Privilege Escalation Vulnerability

Solution:
The vendor released FortiClient 3.0 MR5 Patch 4 and FortiClient 3.0 MR6 to address this issue. Please contact the vendor for information on how to obtain and apply these fixes.

Fortinet FortiClient 'fortimon.sys' Local Privilege Escalation Vulnerability

References:

• Fortinet Homepage (Fortinet)
  
• [Reversemode Advisory] February Advisories : Microsoft Word 2003 + Fortinet For (Reversemode )