Re: Re: WinPcap NPF.SYS Privilege Elevation Vulnerability

Hello Gianluca,

You are right, i'm so sorry about my "bug", i'm updating the advisory right now in order to fix it. The latest affected version is 4.0 as you said.

Updated advisory at :

http://www.48bits.com/exploits/npfxpl.c

Kind regards,

Mario Ballano

Relevant Pages

  • Re: Complicated Disclosure Scenario
    ... either A) they put you on pay roll and you fix all ... Initially the bug presented itself as a way to ... > before they began creating an advisory or even working on a patch. ... > I informed this vendor, who is by no means short on resources, that I ...
    (Vuln-Dev)
  • UPDATE: Reading local files in Netscape 6 and Mozilla (GM#001-NS)
    ... makes this bug far more volatile than the one patched by ... This vulnerability opens the entire file system up for reading (as long as ... We added a "Mozilla Disk Explorer" demonstration to our advisory, ...
    (NT-Bugtraq)
  • UPDATE (1-May-2002): Reading local files in Netscape 6 and Mozilla (GM#001-NS)
    ... makes this bug far more volatile than the one patched by ... This vulnerability opens the entire file system up for reading (as long as ... We added a "Mozilla Disk Explorer" demonstration to our advisory, ...
    (Bugtraq)
  • Re: FreeBSD bug grants local root access (FreeBSD 6.x)
    ... Is there any further feedback regarding this bug? ... to see if this also affects FreeBSD 5.x? ... peer-review on the security advisory draft, the bug was found and fixed ... not recognized as a security vulnerability at that time. ...
    (FreeBSD-Security)
  • Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942)
    ... This is the story of a yet unpatched bug which is not a 0-day. ... After reading Microsoft's advisory I continued with TippingPoint's ... Code execution is possible (why would Microsoft over-rate it?) ... First class mailslot ...
    (Bugtraq)