LiteManager 4.5.0 – ‘romservice’ Unquoted Serive Path

Exploit Database
13 阅读

作者： cakes

日期： 2019-10-16
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/47508/

# Exploit Title : LiteManager 4.5.0 - 'romservice' Unquoted Serive Path
# Date : 2019-10-15
# Exploit Author : Cakes
# Vendor: LiteManager Team
# Version : LiteManager 4.5.0
# Software: http://html.tucows.com/preview/1594042/LiteManager-Free?q=remote+support
# Tested on Windows 10
# CVE : N/A 
 
c:\>sc qc romservice
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: romservice
TYPE : 10WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL: 1 NORMAL
BINARY_PATH_NAME : C:\Program Files (x86)\LiteManagerFree - Server\ROMServer.exe
LOAD_ORDER_GROUP :
TAG: 0
DISPLAY_NAME : LiteManagerTeam LiteManager
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem

last Exploits
LiteManager 4.5.0 – ‘romservice’ Unquoted Serive Path的更多信息

GOM Player 2.3.90.5360 – Buffer Overflow (PoC)：
Microsoft Windows .Reg File – Dialog Spoof / Mitigation Bypass：
Linux Kernel < 3.8.x - open-time Capability 'file_ns_capable()' Local Privilege Escalation：
Solaris Recommended Patch Cluster 6/19 (x86) – Local Privilege Escalation：
Huawei Mate 7 – ‘/dev/hifi_misc’ Privilege Escalation：
Dell Security Management Server <1.9.0 - Local Privilege Escalation：
WebEx – Local Service Permissions Exploit (Metasploit)：
Microsoft Power Point 2016 – Java Code Execution：