Ext2Fsd v0.68 – ‘Ext2Srv’ Unquoted Service Path

Exploit Database
13 阅读

作者： Mohammed Alshehri

日期： 2021-03-24
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/49706/

# Exploit Title: Ext2Fsd v0.68 - 'Ext2Srv' Unquoted Service Path
# Date: 2021-1-19
# Exploit Author: Mohammed Alshehri
# Software Link:https://sourceforge.net/projects/ext2fsd/files/latest/download
# Version: 0.68
# Tested on: Microsoft Windows 10 Education - 10.0.17763 N/A Build 17763


# Service info:
C:\Users\m507>sc qc Ext2Srv
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: Ext2Srv
TYPE : 10WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL: 1 NORMAL
BINARY_PATH_NAME : C:\Program Files\Ext2Fsd\Ext2Srv.exe
LOAD_ORDER_GROUP :
TAG: 0
DISPLAY_NAME : Ext2 Management Service
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem


C:\Users\m507>


# Exploit:
This vulnerability could permit executing code during startup or reboot with the escalated privileges.

last Exploits
Ext2Fsd v0.68 – ‘Ext2Srv’ Unquoted Service Path的更多信息

DESlock+ < 4.1.10 - 'vdlptokn.sys' Local Kernel Ring0 SYSTEM：
Alice 2.2 – Arbitrary Code Execution：
HT-MP3Player 1.0 – ‘.HT3’ File Parsing Buffer Overflow (Metasploit)：
Thomson Reuters Fixed Assets CS 13.1.4 – Local Privilege Escalation：
ASX to MP3 Converter 3.1.2.1 – Multiple OS ASLR + DEP Bypass (SEH) (Metasploit)：
DeviceLock Plug and Play Auditor 5.72 – Unicode Buffer Overflow (SEH)：
Shellzip 3.0 Beta 3 – ‘.zip’ Local Stack Buffer Overflow：
Huawei Technologies du Mobile Broadband 16.0 – Local Privilege Escalation：