Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: WinPcap local privilege escalation SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
WinPcap local privilege escalation

An exploit has been made public for a privilege escalation in WinPcap, a DLL used by many security tools.

Even if we agree most systems security professionals would use this on, will typically not have many untrusted users and as such will escape he worst of this. Still, a local escalation and a remote user level exploit combined might be bad enough to get such security systems exploited.

Better be safe than sorry.

WinPcap version 4.0.1 should fix this.

--
Swa Frantzen -- NET2S

Swa

760 Posts
Jul 10th 2007

Sign Up for Free or Log In to start participating in the conversation!