high7.2Public exploit code
CVE-2013-5701
Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebBlocker Server (wbserver.exe) in WatchGu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Watchguard Server Center - Local Privilege Escalation2013-09-08 · local · windows · Verified
Impact
Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebBlocker Server (wbserver.exe) in WatchGuard Server Center 11.7.4, 11.7.3, and possibly earlier allow local users to gain privileges via a Trojan horse wgpr.dll file in the application's bin directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Watchguard | Server Center | through 11.7.4 Version 11.7.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2013/Sep/43
- http://www.securitytracker.com/id/1028992
- https://www.rcesecurity.com/2013/09/cve-2013-5701-watchguard-server-center-v11-7-4-wgpr-dll-local-privileges-escalation-vulnerability
- http://seclists.org/fulldisclosure/2013/Sep/43
- http://www.securitytracker.com/id/1028992
- https://www.rcesecurity.com/2013/09/cve-2013-5701-watchguard-server-center-v11-7-4-wgpr-dll-local-privileges-escalation-vulnerability