DriveCrypt 'DCR.sys' Arbitrary File Read Write Local Privilege Escalation Vulnerability
BID:45750
Info
DriveCrypt 'DCR.sys' Arbitrary File Read Write Local Privilege Escalation Vulnerability
| Bugtraq ID: | 45750 |
| Class: | Design Error |
| CVE: |
CVE-2011-0513 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 11 2011 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | Neil Kettle |
| Vulnerable: |
SecurStar DriveCrypt 5.3 |
| Not Vulnerable: |
SecurStar DriveCrypt 5.5 |
Discussion
DriveCrypt 'DCR.sys' Arbitrary File Read Write Local Privilege Escalation Vulnerability
DriveCrypt is prone to a local privilege-escalation vulnerability.
An attacker can exploit this issue to read and write to arbitrary files. This will allow the attacker to fully compromise the affected machine.
DriveCrypt 5.3 and prior versions are vulnerable.
DriveCrypt is prone to a local privilege-escalation vulnerability.
An attacker can exploit this issue to read and write to arbitrary files. This will allow the attacker to fully compromise the affected machine.
DriveCrypt 5.3 and prior versions are vulnerable.
Solution / Fix
DriveCrypt 'DCR.sys' Arbitrary File Read Write Local Privilege Escalation Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for more information.
Solution:
Vendor updates are available. Please contact the vendor for more information.
References
DriveCrypt 'DCR.sys' Arbitrary File Read Write Local Privilege Escalation Vulnerability
References:
References:
- Disk encryption driver bugs (Digit Labs.org)
- DriveCrypt 1344 Bit Disk Encryption (SecurStar)
- Vendor Homepage (SecurStar)