Kaspersky Administration Kit 'SMBRelay' Remote Code Execution Vulnerability

Bugtraq ID:	47563
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 25 2011 12:00AM
Updated:	Apr 25 2011 12:00AM
Credit:	Alexandr Polyakov
Vulnerable:	Kaspersky Administration Kit 8.0 Kaspersky Administration Kit 6.0 MP2 Kaspersky Administration Kit 6.0 MP1 Kaspersky Administration Kit 6.0
Not Vulnerable:

Kaspersky Administration Kit 'SMBRelay' Remote Code Execution Vulnerability

Kaspersky Administration Kit is prone to a vulnerability due to an SMBrelay.

Successful exploits will allow attackers to execute arbitrary code in the context of the affected application; other attacks may also be possible.

Kaspersky Administration Kit 'SMBRelay' Remote Code Execution Vulnerability

Attacker can perform an SMBrelay attack to exploit this issue.

Kaspersky Administration Kit 'SMBRelay' Remote Code Execution Vulnerability

Solution:
Vendor fixes are available. Please see the references for more information.

Kaspersky Administration Kit 'SMBRelay' Remote Code Execution Vulnerability

References:

• Administration Kit Homepage (Kaspersky)
  
• How to prevent SMB Relay attacks aimed at receiving extended privileges in Micro (kaspersky)
  
• [DSECRG-11-018] Kaspersky administration Kit - Remote code execution via SMBRela (Alexandr Polyakov)