iPassConnect Local Privilege Escalation Vulnerability
BID:34801
Info
iPassConnect Local Privilege Escalation Vulnerability
| Bugtraq ID: | 34801 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 04 2009 12:00AM |
| Updated: | May 05 2009 05:26PM |
| Credit: | Kevin Lawler |
| Vulnerable: |
iPass iPassConnect 3.66 iPass iPassConnect 3.60 iPass iPassConnect 3.51 |
| Not Vulnerable: | |
Discussion
iPassConnect Local Privilege Escalation Vulnerability
iPassConnect is prone to a local privilege-escalation vulnerability.
Attackers can exploit this issue to execute arbitrary programs with the privileges of another user.
iPassConnect 3.51, 3.60, and 3.66 are vulnerable. Other versions may also be affected.
iPassConnect is prone to a local privilege-escalation vulnerability.
Attackers can exploit this issue to execute arbitrary programs with the privileges of another user.
iPassConnect 3.51, 3.60, and 3.66 are vulnerable. Other versions may also be affected.
Exploit / POC
iPassConnect Local Privilege Escalation Vulnerability
Attackers can use standard tools to exploit this issue.
Attackers can use standard tools to exploit this issue.
Solution / Fix
iPassConnect Local Privilege Escalation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
iPassConnect Local Privilege Escalation Vulnerability
References:
References:
- iPassConnect�?� Mobility Manager (iPass)