CVE Vulnerability

CVE-2021-41065

An issue was discovered in Listary through 6. An attacker can create a \.pipeListary.listaryService named pipe and wait for a privileged user to open a session on the Listary installed host. Listary will automatically access the named pipe and the attacker will be able to duplicate the victim's token to impersonate him. This exploit is valid in certain Windows versions (Microsoft has patched the issue in later Windows 10 builds).

4.4 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.4 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

7.3 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.3 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://medium.com/@tomerp_77017/exploiting-listary-searching-your-way-to-system-privileges-8175af676c3e Exploit Third Party Advisory
https://www.listary.com/download Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:bopsoft:listary:*:*:*:*:*:*:*:*
Information

Published : 2021-12-14 04:15

Updated : 2021-12-20 02:08

NVD link : CVE-2021-41065

Mitre link : CVE-2021-41065

Products Affected
No products.
CWE
CWE-668