Lenovo System Update CVE-2015-2234 Local Privilege Escalation Vulnerability
BID:74634
Info
Lenovo System Update CVE-2015-2234 Local Privilege Escalation Vulnerability
| Bugtraq ID: | 74634 |
| Class: | Race Condition Error |
| CVE: |
CVE-2015-2234 |
| Remote: | No |
| Local: | Yes |
| Published: | May 12 2015 12:00AM |
| Updated: | May 15 2015 12:12AM |
| Credit: | Michael Milvich and Sofiane Talmat of IOActive |
| Vulnerable: |
Lenovo System Update 3.14 Lenovo System Update 3 |
| Not Vulnerable: | |
Discussion
Lenovo System Update CVE-2015-2234 Local Privilege Escalation Vulnerability
Lenovo System Update is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this vulnerability to gain elevated privileges.
Lenovo System Update 5.6.0.27 and prior versions are vulnerable.
Lenovo System Update is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this vulnerability to gain elevated privileges.
Lenovo System Update 5.6.0.27 and prior versions are vulnerable.
Exploit / POC
Lenovo System Update CVE-2015-2234 Local Privilege Escalation Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Lenovo System Update CVE-2015-2234 Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Lenovo System Update CVE-2015-2234 Local Privilege Escalation Vulnerability
References:
References:
- Lenovo Homepage (IBM)