PT-2020-15592 · Barracuda · Barracudadrive

Bobby Cooke + 2 · Published 2020-09-04 · Updated 2020-09-16 · CVE-2020-23834

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AC:L/AV:L/A:H/C:H/I:H/PR:L/S:C/UI:N

Name of the Vulnerable Software and Affected Versions BarracudaDrive version 6.5

Description The issue concerns insecure service file permissions in the bd service, allowing local attackers to escalate privileges to admin. This can be achieved by replacing the %SYSTEMDRIVE%bdbd.exe file. Upon the computer's next start, the new bd.exe will be executed with LocalSystem privileges.

Recommendations For BarracudaDrive version 6.5, ensure proper file permissions are set for the bd service to prevent unauthorized access and modification of the %SYSTEMDRIVE%bdbd.exe file. As a temporary workaround, consider restricting write access to the %SYSTEMDRIVE%bd directory to minimize the risk of exploitation.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-23834

Affected Products

Barracudadrive

References · 4

• 🔥 https://exploit-db.com/exploits/48789 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-23834 · Security Note
• https://osv.dev/vulnerability/CVE-2020-23834 · Vendor Advisory
• https://github.com/boku7/BarracudaDrivev6.5-LocalPrivEsc · Note