high7.2Public exploit code
CVE-2008-5725
The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain I…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PowerStrip 3.84 - 'pstrip.sys' Local Privilege Escalation2008-12-21 · local · windows · Verified
Impact
The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Entechtaiwan | Powerstrip | through 3.84 Versions 3.00, 3.01, 3.02, 3.10, 3.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/33249
- http://securityreason.com/securityalert/4809
- http://www.ntinternals.org/ntiadv0810/ntiadv0810.html
- http://www.securityfocus.com/bid/32961
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47532
- https://www.exploit-db.com/exploits/7533
- http://secunia.com/advisories/33249
- http://securityreason.com/securityalert/4809
- http://www.ntinternals.org/ntiadv0810/ntiadv0810.html
- http://www.securityfocus.com/bid/32961
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47532
- https://www.exploit-db.com/exploits/7533