CVE-2015-7358

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• TrueCrypt 7 / VeraCrypt 1.13 - Drive Letter Symbolic Link Creation Privilege Escalation2015-10-05 · local · windows_x86 · Verified

Impact

The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted volume over an existing drive letter and gain privileges via an entry in the /GLOBAL?? directory.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/133878/Truecrypt-7-Derived-Code-Windows-Drive-Letter-Symbolic-Link-Creation-Privilege-Escalation.html
• http://www.openwall.com/lists/oss-security/2015/09/22/7
• http://www.openwall.com/lists/oss-security/2015/09/24/3
• https://code.google.com/p/google-security-research/issues/detail?id=538
• https://veracrypt.codeplex.com/wikipage?title=Release%20Notes
• https://www.exploit-db.com/exploits/38403/
• http://packetstormsecurity.com/files/133878/Truecrypt-7-Derived-Code-Windows-Drive-Letter-Symbolic-Link-Creation-Privilege-Escalation.html
• http://www.openwall.com/lists/oss-security/2015/09/22/7
• http://www.openwall.com/lists/oss-security/2015/09/24/3
• https://code.google.com/p/google-security-research/issues/detail?id=538
• https://veracrypt.codeplex.com/wikipage?title=Release%20Notes
• https://www.exploit-db.com/exploits/38403/