PT-2021-23062 · Microsoft · Windows 10

Published 2021-12-14 · Updated 2021-12-20 · CVE-2021-41065

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Listary versions through 6

Description An issue was discovered that allows an attacker to create a named pipe and wait for a privileged user to open a session on the host where Listary is installed. Listary will automatically access the named pipe, enabling the attacker to duplicate the victim's token and impersonate them. This issue is valid in certain Windows versions, although Microsoft has patched it in later Windows 10 builds.

Recommendations For Listary versions through 6, consider disabling the named pipe functionality as a temporary workaround until a patch is available. Restrict access to the .pipeListary.listaryService named pipe to minimize the risk of exploitation.

Exploit

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2021-41065

Affected Products

Windows 10

References · 5

• 🔥 https://medium.com/@tomerp_77017/exploiting-listary-searching-your-way-to-system-privileges-8175af676c3e · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-41065 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41065 · Vendor Advisory
• https://listary.com/download · Vendor Advisory
• https://medium.com/%40tomerp_77017/exploiting-listary-searching-your-way-to-system-privileges-8175af676c3e · Note