| शीर्षक | SecureAge CatchPulse 10.9.1 Authentication Bypass by Spoofing |
|---|
| विवरण | The saappctl.sys driver exposes an IOCTL handler that does not properly validate the calling process. There is a basic process path check, but this can be spoofed by modifying the process's PEB. By doing this, the IOCTL can be used to get a file handle and read any resources on the system including the SAM and SYSTEM registry hives. This driver allows an unprivileged user to dump user hashes or any other file on the system by getting a kernel handle on a given resource. |
|---|
| स्रोत | ⚠️ https://vandalsuidaho-my.sharepoint.com/:w:/g/personal/higg2059_vandals_uidaho_edu/IQBo2bcYM-FJTpon1vC0En0vAS3OerOp4Nf0EeZIU4u9mgY?e=XAT64X |
|---|
| उपयोगकर्ता | Jordanhiggins (UID 98250) |
|---|
| सबमिशन | 14/05/2026 12:43 AM (25 दिन पहले) |
|---|
| संयम | 06/06/2026 06:06 PM (24 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 369078 [SecureAge CatchPulse तक 10.9.1 IOCTL saappctl.sys सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|