|
|
>> Servers Alive Local Privilege Escalation Vulnerability
|
Title : Servers Alive Local Privilege Escalation Vulnerability
VUPEN ID : VUPEN/ADV-2005-0270
CVE ID : CVE-2005-0352
CWE ID : CWE-
Rated as : Moderate Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2005-03-17
|
A new vulnerability was identified in Servers Alive, which may be exploited by malicious users to obtain elevated privileges. The flaw occurs when loading the "Local manual" help file, which is run with SYSTEM privileges, and may be exploited to launch a system utility such as "cmd.exe" with elevated privileges.
Affected Products
Servers Alive version 5.0.1680 and prior
Servers Alive version 4.1 and prior
Solution
VUPEN Security is not aware of any official supplied patch for this issue.
References
http://www.vupen.com/english/advisories/2005/0270
Credits
Vulnerability reported by Michael Starks
ChangeLog
2005-03-17 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
