WampServer 3.0.6 File Permission unins000.exe access control ⚔ [Disputed]

Summaryinfo

A vulnerability categorized as problematic has been discovered in WampServer 3.0.6. This affects an unknown part of the file wampmanager.exe/unins000.exe of the component File Permission. Executing a manipulation can lead to access control. This vulnerability is registered as CVE-2016-10072. The attack needs to be launched locally. No exploit is available. The actual existence of this vulnerability is currently in question.

Detailsinfo

A vulnerability classified as problematic was found in WampServer 3.0.6. This vulnerability affects an unknown functionality of the file wampmanager.exe/unins000.exe of the component File Permission. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-264. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

** DISPUTED ** WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local attacker must insert an executable file called wampmanager.exe or unins000.exe and replace the original files. The next time one of these programs is launched by a more privileged user, malicious code chosen by the local attacker will run. NOTE: the vendor disputes the relevance of this report, taking the position that a configuration in which "'someone' (an attacker) is able to replace files on a PC" is not "the fault of WampServer."

The weakness was published 12/27/2016 (Website). The advisory is available at forum.wampserver.com. This vulnerability was named CVE-2016-10072 since 12/26/2016. Local access is required to approach this attack. The successful exploitation needs a single authentication. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1068 by the MITRE ATT&CK project.

The real existence of this vulnerability is still doubted at the moment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entry is available at VDB-94689. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• WampServer

Version

• 3.0.6

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion