Description
NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers using the subst command.
References
- ipd-ntcreatesymboliclinkobject-subs-symlink(10979) vdb-entry
- 20030103 Pedestal Software Security Notice mailing-list
- 20030103 Another way to bypass Integrity Protection Driver ('subst' vuln) mailing-list
- 6511 vdb-entry