G DATA Total Security Link Following Local Privilege Escalation Vulnerability

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the G DATA Backup Service. By creating a symbolic link, an attacker can abuse the service to overwrite a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22313.

N/A

在文件访问前对链接解析不恰当(链接跟随)

G DATA Software Total Security 后置链接漏洞

G Data G DATA Software Total Security是德国G Data公司的一套防病毒软件。该软件具有防钓鱼、防病毒和防垃圾软件等功能。 G DATA Software Total Security存在后置链接漏洞，该漏洞源于允许本地攻击者通过创建符号链接滥用服务来覆盖文件，进而提升权限并在SYSTEM环境中执行任意代码。

N/A

N/A