Description
Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading local manual under the help menu, which allows local users to gain privileges.
References
- 14616 third-party-advisory
- 20050316 Servers Alive: Local Privilege Escalation mailing-list
- 12822 vdb-entry
- serversalive-gain-privileges(19715) vdb-entry