PT-2021-9726 · Unknown · Madcodehook

Kyriakos Economou · Published 2021-01-30 · Updated 2021-02-04 · CVE-2020-14418

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions madCodeHook versions prior to 2020-07-16

Description A TOCTOU vulnerability exists that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.

Recommendations For versions prior to 2020-07-16, update to a version released after 2020-07-16 to resolve the issue. As a temporary workaround, consider restricting access to directory junctions to minimize the risk of exploitation.

Exploit

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2020-14418

Affected Products

Madcodehook

References · 7

• 🔥 https://github.com/nettitude/metasploit-modules · Exploit
• 🔥 https://labs.nettitude.com/blog/cve-2020-14418-madcodehook-library-local-privilege-escalation · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-14418 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14418 · Vendor Advisory
• https://t.me/cvenotify/9178 · Telegram Post
• https://t.me/cvenotify/9206 · Telegram Post
• https://t.me/cibsecurity/22875 · Telegram Post