PT-2016-4559 · Wampserver · Wampserver

Heliand Dema · Publicado 2016-12-27 · Atualizado 2024-08-06 · CVE-2016-10031

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WampServer version 3.0.6

Description The issue arises from weak file permissions in two services, 'wampapache' and 'wampmysqld', which run with SYSTEM privileges. This could allow a local, non-privileged user to execute arbitrary code with elevated privileges by replacing the original files with malicious executable files named mysqld.exe or httpd.exe. The malicious file would be executed as SYSTEM the next time the service starts.

Recommendations For WampServer version 3.0.6, consider restricting access to the services 'wampapache' and 'wampmysqld' to prevent unauthorized file replacements until a proper fix is applied. Additionally, monitor system privileges and file permissions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-10031

Produtos afetados

Wampserver

Referências · 8

• 🔥 https://exploit-db.com/exploits/40967 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-10031 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-10031 · Aviso do Fabricante
• https://t.me/cvenotify/89332 · Publicação no Telegram
• http://forum.wampserver.com/read.php?2%2C144473 · Nota
• https://t.me/cvenotify/80138 · Publicação no Telegram
• https://packetstormsecurity.com/files/140279/Wampserver-3.0.6-Privilege-Escalation.html · Nota
• https://sourceforge.net/p/wampserver/bugs/52 · Nota