Mailtraq 2.x – Administration Console Privilege Escalation

漏洞ID	1054763	漏洞类型
发布时间	2004-11-19	更新时间	2004-11-19
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/24753

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/11708/info

Mailtraq allows a user to activate the Mailtraq administration console software by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the administration console interface to escalate privileges.

1. Double click on the Mailtraq icon in the Taskbar
2. Right click in the right text pane and choose View Source
3. Notepad should open. Click File, click Open
4. In the Files of type: field choose All Files
5. Navagate to '%WINDIR%System32'. Right click on 'cmd.exe' and choose Open
7. A command prompt will launch with SYSTEM privileges

相关推荐: Gaim Manual Browser Command Arbitrary Command Execution Vulnerability

Gaim Manual Browser Command Arbitrary Command Execution Vulnerability 漏洞ID 1101624 漏洞类型 Input Validation Error 发布时间 2002-08-27 更新时…