Vulnerability Description
An issue was discovered in Listary through 6. An attacker can create a \\.\pipe\Listary.listaryService named pipe and wait for a privileged user to open a session on the Listary installed host. Listary will automatically access the named pipe and the attacker will be able to duplicate the victim's token to impersonate him. This exploit is valid in certain Windows versions (Microsoft has patched the issue in later Windows 10 builds).
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bopsoft | Listary | <= 6 |
Related Weaknesses (CWE)
References
- https://medium.com/%40tomerp_77017/exploiting-listary-searching-your-way-to-syst
- https://www.listary.com/downloadVendor Advisory
- https://medium.com/%40tomerp_77017/exploiting-listary-searching-your-way-to-syst
- https://www.listary.com/downloadVendor Advisory
FAQ
What is CVE-2021-41065?
CVE-2021-41065 is a vulnerability with a CVSS score of 7.3 (HIGH). An issue was discovered in Listary through 6. An attacker can create a \\.\pipe\Listary.listaryService named pipe and wait for a privileged user to open a session on the Listary installed host. Listar...
How severe is CVE-2021-41065?
CVE-2021-41065 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-41065?
Check the references section above for vendor advisories and patch information. Affected products include: Bopsoft Listary.