----------------------------------------------------------------------

Want a new IT Security job?

Vacant positions at Secunia:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
Servers Alive Privilege Escalation Vulnerability

SECUNIA ADVISORY ID:
SA14616

VERIFY ADVISORY:
http://secunia.com/advisories/14616/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
Local system

SOFTWARE:
Servers Alive 5.x
http://secunia.com/product/4788/

DESCRIPTION:
Michael Starks has discovered a vulnerability in Servers Alive, which
can be exploited by malicious, local users to gain escalated
privileges.

The vulnerability is caused due to the "serversalive.exe" process
invoking the help functionality with SYSTEM privileges. This can be
exploited to execute arbitrary commands on a system with escalated
privileges.

Successful exploitation requires that Servers Alive has been
configured to be run as a service (not default setting).

The vulnerability has been confirmed in version 5.0.1680 and has also
been reported in version 4.1. Other versions may also be affected.

SOLUTION:
Run Servers Alive as an application or grant only trusted users
access to affected systems.

PROVIDED AND/OR DISCOVERED BY:
Michael Starks

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------