saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain privileges by setting the adminUser parameter to true.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Alterpath_manager | Cyclades | 1.2.1 (including) | 1.2.1 (including) |
References
- http://marc.info/?l=full-disclosure\u0026m=110924450827137\u0026w=2
- http://secunia.com/advisories/14378
- http://www.cirt.net/advisories/alterpath_privesc.shtml
- http://www.osvdb.org/14074
- http://marc.info/?l=full-disclosure\u0026m=110924450827137\u0026w=2
- http://secunia.com/advisories/14378
- http://www.cirt.net/advisories/alterpath_privesc.shtml
- http://www.osvdb.org/14074