MacPaw Encrypto 1.0.1 Unquoted Service Path ≈ Packet Storm – Digitalmunition




Exploit/Advisories no-image-featured-image.png

Published on March 23rd, 2021 📆 | 6688 Views ⚑

0

MacPaw Encrypto 1.0.1 Unquoted Service Path ≈ Packet Storm

# Exploit Title: MacPaw Encrypto 1.0.1 – ‘Encrypto Service’ Unquoted Service Path
# Discovery by: Ismael Nava
# Discovery Date: 03-19-2020
# Vendor Homepage: https://macpaw.com/encrypto
# Software Links : https://dl.devmate.com/com.macpaw.win.Encrypto/EncryptoforWin.exe?cid=78456412.1616181092
# Tested Version: 1.0.1
# Vulnerability Type: Unquoted Service Path
# Tested on OS: Windows 10 64 bits

# Step to discover Unquoted Service Path:

C:>wmic service get name, displayname, pathname, startmode | findstr /i “Auto” | findstr /i /v “C:Windows\” |findstr /i /v “””
Encrypto Service Encrypto.Service C:Program FilesEncryptoEncrypto.Service.exe Auto

C:>sc qc “Encrypto.Service”
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: Encrypto.Service
TIPO : 10 WIN32_OWN_PROCESS
TIPO_INICIO : 2 AUTO_START (DELAYED)
CONTROL_ERROR : 1 NORMAL
NOMBRE_RUTA_BINARIO: C:Program FilesEncryptoEncrypto.Service.exe
GRUPO_ORDEN_CARGA :
ETIQUETA : 0
NOMBRE_MOSTRAR : Encrypto Service
DEPENDENCIAS :
NOMBRE_INICIO_SERVICIO: LocalSystem

Source link

Tagged with:



Leave a Reply