nProtect Gameguard npptnt2.vxd Unrestricted I/O Vulnerability

nadirah · Jun 10, 2006

Some games out there use this anti-cheat system to protect their own respective game clients but the anti-cheat system is just useless since it has a unpatched vulnerability. I never saw this posted on any forum before.

From secunia.com:
Secunia Advisory:SA13928
Release Date:2005-01-24
Last Update:2005-02-14
Critical:http://secunia.com/gfx/crit_2.gif
Less critical
Impact:Privilege escalation
Where:Local system
Solution Status:Unpatched
Software:nProtect Gameguard
secunia

Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it.
CVE reference:CVE-2005-0295

Description:
Ryu Connor has reported a vulnerability in nProtect Gameguard, which potentially can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.

The vulnerability is caused due to a design error in the npptnt2.vxd driver, which allows unrestricted low level I/O in user mode from any process. This may e.g. be exploited to modify arbitrary files on the hard drive.

Solution:
Grant only trusted users access to affected systems.

Provided and/or discovered by:
Ryu Connor

Changelog:
2005-02-14: Added CVE reference.
Click to expand...

secunia

Log in or Sign up

nProtect Gameguard npptnt2.vxd Unrestricted I/O Vulnerability

nadirah Registered Member

Log in or Sign up

nProtect Gameguard npptnt2.vxd Unrestricted I/O Vulnerability

nadirah Registered Member

Useful Searches