Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability

Bugtraq ID:	36662
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 13 2009 12:00AM
Updated:	Oct 16 2009 04:08PM
Credit:	Maxim A. Kulakov
Vulnerable:	Cat Computer Services Quick Heal Total Security 2009 10.0 Cat Computer Services Quick Heal Antivirus Plus 2009 10.0
Not Vulnerable:

Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability

Quick Heal AntiVirus Plus and Total Security are prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, resulting in a complete compromise of the affected computer.

The following versions are affected:

Quick Heal AntiVirus Plus 2009 10.0.0
Quick Heal Total Security 2009 10.0.0

Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability

An attacker can use readily available command-line utilities to exploit this issue.

Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability

References:

• Quick Heal Homepage (Quick Heal)
  
• Quick Heal Local Privilege Escalation Vulnerability ([email protected])