Lucene search
MitreCVELIST:CVE-2015-7358HistoryOct 02, 2017 - 7:00 p.m.
CVE-2015-7358
2017-10-0219:00:00
mitre
www.cve.org
2
The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted volume over an existing drive letter and gain privileges via an entry in the /GLOBAL?? directory.
References
packetstormsecurity.com/files/133878/Truecrypt-7-Derived-Code-Windows-Drive-Letter-Symbolic-Link-Creation-Privilege-Escalation.html
www.openwall.com/lists/oss-security/2015/09/22/7
www.openwall.com/lists/oss-security/2015/09/24/3
code.google.com/p/google-security-research/issues/detail?id=538
veracrypt.codeplex.com/wikipage?title=Release%20Notes
www.exploit-db.com/exploits/38403/
Related
prion
prion
Directory traversal
2017-10-03 01:29:00
threatpost
threatpost
German Government Audits TrueCrypt
2015-11-20 12:39:34
TrueCrypt Security Vulnerabilities Patched in VeraCrypt
2015-09-28 15:29:44
nvd
nvd
CVE-2015-7358
2017-10-03 01:29:00
cve
cve
CVE-2015-7358
2017-10-03 01:29:00
zdt
zdt
exploitdb
exploitdb
thn
thn
TrueCrypt Encryption Software Has Two Critical Flaws: It's time to Move On
2015-09-30 20:15:00
THN Weekly Roundup — 11 Most Important Hacking News Stories
2015-10-05 05:48:00