what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Andrew Hay

Rackspace Windows Agent / Updater Arbitrary Code Execution

Posted Nov 24, 2013

Authored by Andrew Hay | Site blog.cloudpassage.com

The Rackspace Windows Agent and Updater allows for modified Agent binaries to be remotely uploaded (without authentication) to Rackspace Cloud Server guest instances. Modified Agent binaries are processed as an update for the Agent and arbitrary code can then be executed after the service is restarted. Previous versions of the Updater (before 1.2.6.0) allowed for unsigned agent updates utilizing a specially crafted .NET remote call to TCP port 1984.

tags | advisory, remote, arbitrary, tcp

systems | windows

advisories | CVE-2013-6795

SHA-256 | e1432ce56dfb5361bc47edbd2d3c8d08d7d01f9b5dba847ea442095175de0442

Download | Favorite | View