Description
Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop privileges when launching an Explorer window in response to a help command, which allows local users to gain LocalSystem privileges via interactive use of Explorer.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/22424 ↗
- http://www.vupen.com/english/advisories/2007/0496 ↗
- http://www.cpni.gov.uk/Products/advisories/default.aspx?id=al-20070129-0107.xml ↗
- http://www.bemacpromotions.com/files/xkpatch462660.zip ↗
- http://www.cpni.gov.uk/Products/vulnerabilitydisclosures/default.aspx?id=va-20070129-0107.xml ↗
- http://osvdb.org/33110 ↗
- http://www.barronmccann.com/ISec/s2pressrelease.asp?PRID=141&S2ID=14 ↗
- http://jvn.jp/niscc/NISCC-462660/index.html ↗
- http://secunia.com/advisories/24045 ↗