PT-2016-4568 · Wampserver Team · Wampserver

Published 2016-12-27 · Updated 2024-08-06 · CVE-2016-10072

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WampServer version 3.0.6

Description The issue concerns two files, wampmanager.exe and unins000.exe, which have a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To exploit this, the local attacker must replace the original files with an executable file of the same name. When a more privileged user launches one of these programs, malicious code chosen by the local attacker will run.

Recommendations For WampServer version 3.0.6, consider restricting access to the files wampmanager.exe and unins000.exe to prevent unauthorized modifications until a proper fix is available. Additionally, ensure that only trusted users have the ability to replace or modify these files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-264

CWE-94

Related Identifiers

CVE-2016-10072

Affected Products

Wampserver

References · 6

• 🔥 https://packetstormsecurity.com/files/138948/wampserver306-insecure.txt · Exploit
• https://osv.dev/vulnerability/CVE-2016-10072 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10072 · Security Note
• http://forum.wampserver.com/read.php?2%2C144473 · Note
• https://t.me/cvenotify/89333 · Telegram Post
• https://t.me/cvenotify/84532 · Telegram Post