NETGATE Data Backup 3.0.620 – ‘NGDatBckpSrv’ Unquoted Service Path

Exploit Database
32 阅读

作者： ZwX

日期： 2019-12-05
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/47746/

#Exploit Title: NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path
#Exploit Author : ZwX
#Exploit Date: 2019-12-04
#Vendor Homepage : http://www.netgate.sk/
#Link Software : http://www.netgate.sk/download/download.php?id=5
#Tested on OS: Windows 7


#Analyze PoC :
==============


C:\Users\ZwX>sc qc NGDatBckpSrv
[SC] QueryServiceConfig réussite(s)

SERVICE_NAME: NGDatBckpSrv
TYPE : 10WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL: 1 NORMAL
BINARY_PATH_NAME : C:\Program Files\NETGATE\Data Backup\DataBackupSrv.exe
LOAD_ORDER_GROUP :
TAG: 0
DISPLAY_NAME : NETGATE Data Backup Service
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem

last Exploits
NETGATE Data Backup 3.0.620 – ‘NGDatBckpSrv’ Unquoted Service Path的更多信息

TeamSpeak 3.5.6 – Insecure File Permissions：
Apple Mac OSX Entitlements – ‘Rootpipe’ Local Privilege Escalation (Metasploit)：
CoolZip 2.0 – zip Buffer Overflow：
Microsoft Windows – OLE Package Manager Code Execution (MS14-060) (Metasploit)：
Microsoft Office 2010 – ‘.RTF’ Header Stack Overflow：
Serviio PRO 1.8 DLNA Media Streaming Server – Local Privilege Escalation：
Gesytec ElonFmt ActiveX 1.1.14 – ‘ElonFmt.ocx’ pid Item Buffer Overflow (SEH)：
Linux Polkit – pkexec helper PTRACE_TRACEME local root (Metasploit)：