Sophos Patches Privilege Escalation Flaws in SafeGuard Products

guest · Jun 26, 2018

Sophos Patches Privilege Escalation Flaws in SafeGuard Products
Researchers discovered several vulnerabilities in Sophos SafeGuard full-disk and file encryption products.
The flaws allow an attacker to escalate privileges on a compromised device and execute arbitrary code with SYSTEM permissions.
June 26, 2018
https://www.securityweek.com/sophos-patches-privilege-escalation-flaws-safeguard-products

A total of seven local privilege escalation vulnerabilities have been identified by researchers at Nettitude. The security holes can be exploited via various IOCTL calls using specially crafted input buffers that allow attackers to control the execution path.

Nettitude has published technical details for each of the flaws, along with a video showing how an attacker with access to the targeted device can escalate privileges to SYSTEM.

“Sophos is not aware of any attacks leveraging those vulnerabilities or exploits for them being available,” the security firm wrote in its advisory. “Exploitation of those vulnerabilities requires running malicious code on the target machine and can result in privilege escalation. This vulnerability is not remotely exploitable (i.e. over the network).”
Click to expand...

Log in or Sign up

Sophos Patches Privilege Escalation Flaws in SafeGuard Products

guest Guest

Log in or Sign up

Sophos Patches Privilege Escalation Flaws in SafeGuard Products

guest Guest

Useful Searches