TrueCrypt、VeraCrypt和CipherShed 权限许可和访问控制问题漏洞

漏洞信息详情

TrueCrypt、VeraCrypt和CipherShed for Windows都是基于Windows平台的免费、开源的磁盘加密软件。

TrueCrypt 7.0版本、VeraCrypt 1.15之前的版本和CipherShed 0.7.5.0及之前的版本中的Driver/Ntdriver.c文件的IsDriveLetterAvailable方法存在安全漏洞。本地攻击者可利用该漏洞获取提升的权限。

目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页：

https://truecrypt.ch/

https://veracrypt.codeplex.com/

来源:EXPLOIT-DB

链接:https://www.exploit-db.com/exploits/38403/

来源:CONFIRM

链接:https://veracrypt.codeplex.com/wikipage?title=Release%20Notes

来源:MISC

链接:https://code.google.com/p/google-security-research/issues/detail?id=538

来源:MISC

链接:https://packetstormsecurity.com/files/133878/Truecrypt-7-Derived-Code-Windows-Drive-Letter-Symbolic-Link-Creation-Privilege-Escalation.html

来源:MLIST

链接:http://www.openwall.com/lists/oss-security/2015/09/22/7

来源:MLIST

链接:http://www.openwall.com/lists/oss-security/2015/09/24/3