mks_vir 'mksmonen.sys' IOCTL Request Local Privilege Escalation Vulnerability

Bugtraq ID:	34039
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Mar 09 2009 12:00AM
Updated:	Mar 11 2009 07:36PM
Credit:	Alex of NT Internals
Vulnerable:	MKS Sp. z o.o. mks_vir 0
Not Vulnerable:	MKS Sp. z o.o. mks_vir 9 Beta 1.2.0.0 Build

mks_vir 'mksmonen.sys' IOCTL Request Local Privilege Escalation Vulnerability

The 'mks_vir' program is prone a local privilege-escalation vulnerability.

An attacker can exploit this issue to execute arbitrary code with elevated privileges; this may aid in further attacks.

Versions prior to mks_vir 9 Beta 1.2.0.0 build 297 are vulnerable.

mks_vir 'mksmonen.sys' IOCTL Request Local Privilege Escalation Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/MksMonEn_Exp.zip

mks_vir 'mksmonen.sys' IOCTL Request Local Privilege Escalation Vulnerability

Solution:
Reports indicate that this issue has been fixed. Please see the references for more information.

mks_vir 'mksmonen.sys' IOCTL Request Local Privilege Escalation Vulnerability

References:

• mks_vir (mksmonen.sys) Privilege Escalation Vulnerability (NT Internals)
  
• Vendor Homepage (MKS Sp. z o.o)