SMRKsoft Remote Files Insecure Default Directory Permissions Privilege Escalation Vulnerability

Bugtraq ID:	41971
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 04 2009 12:00AM
Updated:	Nov 04 2009 12:00AM
Credit:	Francis Provencher, Protek Research Lab
Vulnerable:	SMRKsoft Remote Files Server Edition 2.4.2 SMRKsoft My Remote Files 2.4.2
Not Vulnerable:

SMRKsoft Remote Files Insecure Default Directory Permissions Privilege Escalation Vulnerability

SMRKsoft Remote Files is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to gain elevated privileges on affected computers.

Remote Files Server Edition 2.4.2 and My Remote Files 2.4.2 are vulnerable; other versions may also be affected.

SMRKsoft Remote Files Insecure Default Directory Permissions Privilege Escalation Vulnerability

Attackers can exploit this issue with readily available tools.

SMRKsoft Remote Files Insecure Default Directory Permissions Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SMRKsoft Remote Files Insecure Default Directory Permissions Privilege Escalation Vulnerability

References:

• SMRKsoft Homepage (SMRKsoft)