Description
Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers have noted that administrator privileges may be necessary to terminate shstart.exe. If this is the case, then no privilege escalation occurs, and this is not a vulnerability
References
- 20061206 RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation mailing-list
- 20061205 RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation mailing-list
- 20061205 Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation mailing-list
- 1017332 vdb-entry
- 20061205 Re: Symantec LiveState Agent for Windows vulnerabi mailing-list
- 20061204 Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation mailing-list
- symantec-shstart-privilege-escalation(30728) vdb-entry