Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/03/2008 Updated: 29/09/2017

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and previous versions allows local users to gain privileges via a certain DLKFDISK_IOCTL request to \\.\DLKFDisk_Control that overwrites a data structure associated with a mounted pseudo-filesystem, aka the "ring0 SYSTEM" vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
deslock deslock

/* deslock-pown-v2c * * Copyright (c) 2008 by <mu-b@digit-labsorg> * * DESlock+ <= 326 local kernel ring0 SYSTEM exploit * by mu-b - Wed 26 Dec 2007 * * - Tested on: DLMFDISKsys 12027 * - Microsoft Windows 2003 SP2 * - Microsoft Windows XP SP2 * * Note: create a mountable filesystem (size/passwo ...

CWE-264 http://secunia.com/advisories/29005 http://www.vupen.com/english/advisories/2008/0597 https://www.exploit-db.com/exploits/5144 https://nvd.nist.gov https://www.exploit-db.com/exploits/5144/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-1140

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect