USB stick-sploit makes anyone a Windows admin

Powered by SC Magazine
 

Windows 7 affected.

Researchers have detailed a current vulnerability in Windows 7 that allows school kids, university students and other local users to side-step security controls and gain administrator access.

The low-severity NULL pointer dereference bug focused on the "rather complex and still largely unexplored" NTFS file system which was exploited via a crafted USB volume.

Gynvael Coldwind found the vulnerability while Mateusz "j00ru" Jurczyk wrote the exploit.

Together, they said it served as an interesting case study of Windows kernel exploitation using novel techniques to achieve reliable code execution with escalated privileges.

"Windows actively uses so many interesting system structures (in)directly controlled from user-mode that there is always one that fits properly, even for very complicated types of memory corruption conditions," the researchers wrote.

"...The only scenario in which it might be a problem security-wise is a local computer shared between multiple users with restricted privileges and thus has been rated as low-severity by both us and MSRC (Microsoft Security Response Center)."

They said the exploit might work on earlier Windows operating systems but did not reproduce on Windows 8.

Microsoft was reportedly investigating a potential fix for stability purposes.

Technical details on the bug and exploit were available on both Coldwind's and Jurczyk's blogs.

Copyright © SC Magazine, Australia


USB stick-sploit makes anyone a Windows admin
 
 
 
Top Stories
ATO shaves $4m off IT contractor panel
Reform cuts admin burden, introduces KPIs.
 
Turnbull introduces data retention legislation
Still no definition of metadata to be stored.
 
Crime Commission prepares core systems overhaul
Will replace 30 year-old national criminal database.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Do you direct debit customers? Read this
Oct 10, 2014
Authorities have been targeting direct debit practices with iiNet and Dodo receiving formal ...
Optus expands 4G coverage
Oct 10, 2014
If you rely on an Optus phone for work you might be interested to know that there are now 200 ...
Microsoft Office is now free for some charities
Oct 10, 2014
Microsoft has announced that eligible Australian non-profit organisations and charities can now ...
Vodafone lights up 4G in Adelaide
Oct 9, 2014
Live and work in Adelaide? Vodafone has switched on its 4G network in the city and suburbs.
Next year tradies will be able to take payments using ingogo
Oct 3, 2014
Ingogo is going to provide a card payment service for Xero users.
Latest Comments
Polls
In which area is your IT shop hiring the most staff?




   |   View results
IT security and risk
  27%
 
Sourcing and strategy
  12%
 
IT infrastructure (servers, storage, networking)
  21%
 
End user computing (desktops, mobiles, apps)
  14%
 
Software development
  25%
TOTAL VOTES: 432

Vote
Would your InfoSec team be prepared to share threat data with the Australian Government?

   |   View results
Yes
  54%
 
No
  46%
TOTAL VOTES: 208

Vote