# Exploit: IVPN Client for Windows 2.6.6120.33863 Privilege Escalation # Date: 06.02.2017 # Software Link: https://www.ivpn.net/ # Exploit Author: Kacper Szurek # Contact: https://twitter.com/KacperSzurek # Website: http://ift.tt/2iHZPtU # Category: local 1. Description It is possible to run `openvpn` as `SYSTEM` with custom openvpn.conf. Using `--up cmd` we can execute any command. http://ift.tt/2lfzTEv 2. Proof of Concept http://ift.tt/2lckF6X 3. Solution Update to version 2.6.2 http://ift.tt/2lhDcvy
Source: Gmail -> IFTTT-> Blogger
No comments:
Post a Comment