DigitalPersona 4.5.0.2213 – ‘DpHostW’ Unquoted Service Path

Exploit Database
13 阅读

作者： SamAlucard

日期： 2020-11-09
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/49008/

#Exploit Title: DigitalPersona 4.5.0.2213 - 'DpHostW' Unquoted Service Path
#Exploit Author : SamAlucard
#Exploit Date: 2020-11-08
#Vendor : DigitalPersonaU. are U. One Touch
#Version : DigitalPersona Pro 4.5.0.2213
#Vendor Homepage :https://www.hidglobal.com/crossmatch
#Tested on OS: Windows 10 Home

#Analyze PoC :
==============

C:\>sc qc DpHost
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: DpHost
TIPO : 10WIN32_OWN_PROCESS
TIPO_INICIO: 2 AUTO_START
CONTROL_ERROR: 1 NORMAL
NOMBRE_RUTA_BINARIO: C:\Program Files
(x86)\DigitalPersona\Bin\DpHostW.exe
GRUPO_ORDEN_CARGA: BiometricGroup
ETIQUETA : 0
NOMBRE_MOSTRAR : Servicio de autenticación biométrica
DEPENDENCIAS : RPCSS
NOMBRE_INICIO_SERVICIO: LocalSystem

last Exploits
DigitalPersona 4.5.0.2213 – ‘DpHostW’ Unquoted Service Path的更多信息

Adrenalin Player 2.2.5.3 – ‘.wvx’ Local Buffer Overflow (SEH)：
Kaspersky 17.0.0 – Local CA Root Incorrectly Protected：
AVCon – DEP Bypass：
Zilab Remote Console Server 3.2.9 – ‘zrcs’ Unquoted Service Path：
Total Video Player 1.3.1 – ‘Settings.ini’ Local Buffer Overflow (SEH) (Metasploit)：
Elantech-Smart Pad 11.9.0.0 – Unquoted Service Path Privilege Escalation：
SprintWork 2.3.1 – Local Privilege Escalation：
Microsoft Windows 10 – Sandboxed Mount Reparse Point Creation Mitigation Bypass (MS15-111)：