Ubisoft Uplay Insecure File Permissions Vulnerability
BID:68407
Info
Ubisoft Uplay Insecure File Permissions Vulnerability
| Bugtraq ID: | 68407 |
| Class: | Unknown |
| CVE: |
CVE-2014-5453 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 03 2014 12:00AM |
| Updated: | Mar 19 2015 09:26AM |
| Credit: | Gjoko Krstic |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Ubisoft Uplay Insecure File Permissions Vulnerability
Ubisoft Uplay is prone to an insecure file-permissions vulnerability.
An attacker can exploit this issue to gain unauthorized access to or create arbitrary files with elevated privileges.
Ubisoft Uplay 4.6.3208 and 4.5.2.3010 are vulnerable.
Ubisoft Uplay is prone to an insecure file-permissions vulnerability.
An attacker can exploit this issue to gain unauthorized access to or create arbitrary files with elevated privileges.
Ubisoft Uplay 4.6.3208 and 4.5.2.3010 are vulnerable.
Exploit / POC
Ubisoft Uplay Insecure File Permissions Vulnerability
The following proof of concept is available:
The following proof of concept is available:
Solution / Fix
Ubisoft Uplay Insecure File Permissions Vulnerability
Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.
References
Ubisoft Uplay Insecure File Permissions Vulnerability
References:
References: