Description
Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to (1) modify arbitrary registry entries via the ScriptLogic RPC service (SLRPC) or (2) modify arbitrary configuration via the RunAdmin services (SLRAserver.exe and SLRAclient.exe).
References
- scriptlogic-runadmin-admin-access(11921) vdb-entry
- VU#231705 third-party-advisory
- 7477 vdb-entry
- 7475 vdb-entry
- http://www.kb.cert.org/vuls/id/CRDY-5EXQRP
- scriptlogic-rpc-modify-registry(11920) vdb-entry
- VU#609137 third-party-advisory
- http://www.kb.cert.org/vuls/id/CRDY-5EXQSV