PT-2016-4559 · Wampserver · Wampserver

Heliand Dema · Published 2016-12-27 · Updated 2024-08-06 · CVE-2016-10031

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WampServer version 3.0.6

Description The issue arises from weak file permissions in two services, 'wampapache' and 'wampmysqld', which run with SYSTEM privileges. This could allow a local, non-privileged user to execute arbitrary code with elevated privileges by replacing the original files with malicious executable files named mysqld.exe or httpd.exe. The malicious file would be executed as SYSTEM the next time the service starts.

Recommendations For WampServer version 3.0.6, consider restricting access to the services 'wampapache' and 'wampmysqld' to prevent unauthorized file replacements until a proper fix is applied. Additionally, monitor system privileges and file permissions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-10031

Affected Products

Wampserver

References · 8

• 🔥 https://exploit-db.com/exploits/40967 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-10031 · Security Note
• https://osv.dev/vulnerability/CVE-2016-10031 · Vendor Advisory
• https://t.me/cvenotify/89332 · Telegram Post
• http://forum.wampserver.com/read.php?2%2C144473 · Note
• https://t.me/cvenotify/80138 · Telegram Post
• https://packetstormsecurity.com/files/140279/Wampserver-3.0.6-Privilege-Escalation.html · Note
• https://sourceforge.net/p/wampserver/bugs/52 · Note