Multiple Rising Products Insecure Program File Permissions Local Privilege Escalation Vulnerability

Bugtraq ID:	36836
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 27 2009 12:00AM
Updated:	Oct 28 2009 06:17PM
Credit:	Maxim A. Kulakov and Francis Provencher
Vulnerable:	Rising Antivirus International Rising Personal Firewall 2009 0 Rising Antivirus International Rising Internet Security 2009 0 Rising Antivirus International Rising Antivirus 2009 0
Not Vulnerable:

Multiple Rising Products Insecure Program File Permissions Local Privilege Escalation Vulnerability

Multiple Rising products are prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, resulting in a complete compromise of the affected computer.

The following Rising products are affected:

Antivirus 2009
Internet Security 2009
Personal Firewall 2009

Multiple Rising Products Insecure Program File Permissions Local Privilege Escalation Vulnerability

An attacker can use readily available command-line utilities to exploit this issue.

Multiple Rising Products Insecure Program File Permissions Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Rising Products Insecure Program File Permissions Local Privilege Escalation Vulnerability

References:

• Rising Homepage (Rising International Software)
  
• {PRL} Rising Antivirus 2009 Privilege Escalation ( Protek Research Lab )
  
• {PRL} Rising Firewall 2009 Privilege Escalation (Protek Research Lab )
  
• Rising Multiple Products Local Privilege Escalation Vulnerability ([email protected])