Unscored CVE-2008-0581 EUVD-2008-0591GHSA-37hm-h4p2-3xrx

Geert Moernaut LSrunasE allows local users to gain privileges by obtaining the encrypted password from a batch file, and constructing a mod…

Published Feb 5, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Geert Moernaut LSrunasE allows local users to gain privileges by obtaining the encrypted password from a batch file, and constructing a modified batch file that specifies this password in the /password switch and specifies an arbitrary program in the /command switch.

References

20080129 Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340) mailing-list
3611 third-party-advisory