what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

McAfee Safe Connect VPN Unquoted Service Path

McAfee Safe Connect VPN Unquoted Service Path
Posted Mar 10, 2022
Authored by Saud Alenazi

McAfee Safe Connect VPN suffers from an unquoted service path vulnerability.

tags | exploit
SHA-256 | 5502da1c6d1cd3f45b148e073ebac251aa5385dbc8b2be76e1f2a220bbe458f1

McAfee Safe Connect VPN Unquoted Service Path

Change Mirror Download
# Exploit Title: McAfee® Safe Connect VPN - Unquoted Service Path Elevation Of Privilege
# Date: 09/03/2022
# Exploit Author: Saud Alenazi
# Vendor Homepage: https://www.mcafee.com/
# Software Link: https://www.mcafee.com/en-us/vpn/mcafee-safe-connect.html
# Version: 2.13
# Tested: Windows 10 x64
# Contact: https://twitter.com/dmaral3noz

C:\Users\saudh>sc qc SafeConnectService

[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: SafeConnectService

TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Program Files (x86)\McAfee\McAfee Safe Connect\SafeConnect.ServiceHost.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : McAfee Safe Connect Service
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem


#Exploit:

A successful attempt would require the local user to be able to insert their code in the system root path undetected by the OS or other security applications where it could potentially be executed during application startup or reboot. If successful, the local user's code would execute with the elevated privileges of the application.

Login or Register to add favorites

File Archive:

July 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    52 Files
  • 2
    Jul 2nd
    0 Files
  • 3
    Jul 3rd
    0 Files
  • 4
    Jul 4th
    0 Files
  • 5
    Jul 5th
    0 Files
  • 6
    Jul 6th
    0 Files
  • 7
    Jul 7th
    0 Files
  • 8
    Jul 8th
    0 Files
  • 9
    Jul 9th
    0 Files
  • 10
    Jul 10th
    0 Files
  • 11
    Jul 11th
    0 Files
  • 12
    Jul 12th
    0 Files
  • 13
    Jul 13th
    0 Files
  • 14
    Jul 14th
    0 Files
  • 15
    Jul 15th
    0 Files
  • 16
    Jul 16th
    0 Files
  • 17
    Jul 17th
    0 Files
  • 18
    Jul 18th
    0 Files
  • 19
    Jul 19th
    0 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close