Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80206040. By crafting an input buffer we can control the execution path to the point where the constant DWORD 0 will be written to a user-controlled address. We can take advantage of this condition to zero-out the pointer to the security descriptor in the object header of a privileged process or modify the security descriptor itself and run code in the context of a process running as SYSTEM.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sophos SafeGuard Enterprise、SafeGuard Easy和SafeGuard LAN Crypt 权限许可和访问控制问题漏洞
Vulnerability Description
Sophos SafeGuard Enterprise、SafeGuard Easy和SafeGuard LAN Crypt都是英国Sophos公司的产品。Sophos SafeGuard Enterprise是一套数据安全加密和数据防泄漏解决方案；SafeGuard Easy是一款提供了硬盘加密功能的网络安全组件；SafeGuard LAN Crypt是一套用于数据加密并提供授权管理功能的解决方案。 Sophos SafeGuard Enterprise 8.00.5之前版本、SafeGuard Eas
CVSS Information
N/A
Vulnerability Type
N/A