Remote code execution bug in Microsoft’s Windows PsExec management tool

PsExec is a Microsoft Windows management tool that allows system administrators to execute remote programs. Despite this, an attacker has access to a Windows system via a remote code execution vulnerability, which is caused by a bug in the Common Log File System (CLFS). While Microsoft has patched the vulnerability, the tool can still be exploited.

This vulnerability, known as named pipe hijacking, allows attackers to execute arbitrary programs on a Windows system. These applications can be malicious or legitimate. They can also be used to take over the target system. An attacker must already have access to the system in order to exploit this flaw.

In addition to allowing an attacker to run arbitrary processes, this vulnerability also allows for a local privilege escalation. As a result, attackers can elevate their privileges to the Local System account if they successfully run code on a system. As a result of this elevation of privilege, attackers can gain access to unprivileged services which are vulnerable to attack. After elevating their privileges, attackers are able to establish an RDP session as domain users.

As soon as Microsoft receives feedback from the community, it may release an update to fix the issue. In the meantime, there are tools you can use to protect yourself from attacks such as this. A good alternative is to avoid using PsExec altogether. For more information, see the July 2004 issue of Windows IT Pro Magazine. One of the best options is to use an open source program, PAExec.

Free micropatch fixing local privilege escalation (LPE) vulnerability in Microsoft’s Windows PsExec management tool

There is a vulnerability in the Microsoft Windows PsExec management tool that could allow an attacker to run malicious code on a remote computer. If you use PsExec, you should consider installing a micropatch to fix this issue.

It was originally developed by SysInternals and acquired by Microsoft, but today, most Windows admins use PsExec to manage and run programs on their machines.

Since its first release in 2006, PsExec has been vulnerable to local privilege escalation. Microsoft has not released a patch for this vulnerability. For now, the best solution is to wait for the latest Microsoft security patch. Third-party patch providers have created free micropatches to fix this issue.

A third-party patch provider called 0patch has developed a free micropatch to address CVE-2021-24084, a local privilege escalation vulnerability in the Microsoft PsExec management tool.

Alternatively, by exploiting a system process, an anonymous attacker can launch his own executable by impersonating a token at the identification level.

You can also exploit the issue by creating a symbolic link to the printer spooler folder and then attaching it to the SYSTEM folder. By using this method, the attacker can create arbitrary files, as well as redirect printers with misconfigured spooler folders to a default spooler folder.

It is possible to bypass Windows group policy and gain full administrative privileges using several proof-of-concept scripts and exploits.

Microsoft’s Chromium-based Edge is now available on Android and Chromium-based operating systems

Microsoft is expanding its reach to a wider audience with the release of its Chromium-based Edge browser in January 2020. The new version will be available for Linux shortly. The browser is currently available for Windows, macOS, iOS, and Android.

In addition to improvements to its interface and features, Edge will allow users to customize it with child-friendly themes. It also comes with tracking prevention features and a PUP blocker, as well as its own set of services not available via Chrome.

The new browser is available in over 90 languages. It has a minimalist user interface, making it easier for first-time users to learn.

In the upper right corner there is a three-dot menu with controls for Edge configuration. It is one of the most comprehensive context menus on the Internet and is capable of managing favorites and bookmarks, as well as synchronizing settings across devices.

The user can add the URL of a search engine of their choice, annotate content with short text entries, and create collections to save snippets of web pages.

There are more privacy options in Microsoft’s Edge compared with Google Chrome. These include the option to disable personalized information sharing and disable syncing, which prevents passwords from getting shared.

The Chrome Web Store provides access to a large library of extensions, like those for other Chromium-based browsers.

Data from the old Edge can be imported using a Microsoft account. Once logged in, users can choose whether to import information from the old browser or the current version.

The post Nowfixed Sudo Linuxgatlanbleepingcomputer appeared first on .