SopCast 3.4.7 Diagnose.exe Improper Permissions Privilege Escalation (CVE-2011-5044)

Vulnerability Key Information Title: SopCast 3.4.7 (Diagnose.exe) Improper Permissions Advisory ID: ZSL-2011-5062 Type: Local Impact: Privilege Escalation Risk: (3/5) Release Date: 05.12.2011 Summary SopCast is a simple, free way to broadcast video and audio or watch video and listen to radio over the internet. It uses P2P (Peer-to-Peer) technology, making it highly efficient and easy to use. Sop is an acronym for Streaming over P2P. SopCast is a P2P-based Streaming Direct Broadcasting System. Its core is a communication protocol developed by the SopCast team, named sop:// or SopP technology. Description SopCast contains a privilege escalation vulnerability that can be exploited by a simple user modification of the binary selection of an executable file. The vulnerability exists due to improper permission settings, where the 'F' flag (Full Control) is assigned to the 'Everyone' group for the 'Diagnose.exe' binary included in the SopCast installation package. Affected Versions 3.4.7.45585 Test Environment Microsoft Windows XP Professional SP3 (EN) Vendor Status [30.11.2011] Vulnerability discovered. [01.12.2011] Vendor contacted and detailed information sent. [04.12.2011] No response from vendor. [05.12.2011] Security advisory published. Proof of Concept Acknowledgments Vulnerability discovered by Gjoko Krstic - References 1. http://www.exploit-db.com/exploits/18201/ 2. http://securia.com/advisories/60940/ 3. http://xforce.iss.net/xforce/xfdb/71622 4. http://www.securityfocus.com/bid/50908 5. http://packetstormsecurity.org/files/107527/ZSL-2011-5062.txt 6. http://securityreason.com/exploitalert/11022 7. http://osvdb.org/show/osvdb/77724 8. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5044 Change Log [05.12.2011] - Initial release [06.12.2011] - Added references [3], [4], and [5] [08.12.2011] - Added reference [6] [15.12.2011] - Added reference [7] [15.01.2012] - Added reference [8]

Goal Reached Thanks to every supporter — we hit 100%!

SopCast 3.4.7 Diagnose.exe Improper Permissions Privilege Escalation (CVE-2011-5044)