RETIRED: F-Secure BlackList Local Privilege Escalation Vulnerability

Bugtraq ID:	49159
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Aug 16 2011 12:00AM
Updated:	Aug 29 2011 04:40PM
Credit:	Gjoko Krstic
Vulnerable:	F-Secure BlackList 2.2.1092
Not Vulnerable:

RETIRED: F-Secure BlackList Local Privilege Escalation Vulnerability

F-Secure BlackList is prone to a local privilege-escalation vulnerability.

Local attackers can replace the affected binary with an executable of their choice, allowing them to execute arbitrary code with SYSTEM privileges. This facilitates the complete compromise of the local computer.

F-Secure BlackLight 2.2.1092 is vulnerable; other versions may also be affected.

This BID is being retired. The issue can not be exploited as described.

RETIRED: F-Secure BlackList Local Privilege Escalation Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

RETIRED: F-Secure BlackList Local Privilege Escalation Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

RETIRED: F-Secure BlackList Local Privilege Escalation Vulnerability

References:

• Product Homepage (F-Secure)
  
• F-Secure BlackLight 2.2.1092 Local Privilege Escalation Vulnerability (Zero Science Lab)