APC UPS Daemon CVE-2017-7884 Insecure Permissions Local Privilege Escalation Vulnerability
BID:99092
Info
APC UPS Daemon CVE-2017-7884 Insecure Permissions Local Privilege Escalation Vulnerability
| Bugtraq ID: | 99092 |
| Class: | Unknown |
| CVE: |
CVE-2017-7884 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 15 2017 12:00AM |
| Updated: | Jun 15 2017 12:00AM |
| Credit: | fragsh3ll aka Richard Young |
| Vulnerable: |
APC apcupsd 3.10.5 APC apcupsd 3.8.6 APC apcupsd 3.8.5 APC apcupsd 3.8.2 APC apcupsd 3.8 APC apcupsd 3.7.2 APC apcupsd 3.14.14 |
| Not Vulnerable: | |
Discussion
APC UPS Daemon CVE-2017-7884 Insecure Permissions Local Privilege Escalation Vulnerability
APC UPS Daemon is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to gain SYSTEM privileges on affected computers. Other attacks are also possible.
APC UPS Daemon 3.14.14 and prior versions are vulnerable.
APC UPS Daemon is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to gain SYSTEM privileges on affected computers. Other attacks are also possible.
APC UPS Daemon 3.14.14 and prior versions are vulnerable.
Exploit / POC
APC UPS Daemon CVE-2017-7884 Insecure Permissions Local Privilege Escalation Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
APC UPS Daemon CVE-2017-7884 Insecure Permissions Local Privilege Escalation Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].