Trojan.Win32.Cospet.abg Insecure Permissions

Trojan.Win32.Cospet.abg Insecure Permissions

Trojan.Win32.Cospet.abg malware suffers from an insecure permissions vulnerability.

1
2
3
4
5
6
7
Exploit/PoC:
C:\>cacls \dir
C:\dir BUILTIN\Administrators:(OI)(CI)(ID)F
       NT AUTHORITY\SYSTEM:(OI)(CI)(ID)F
       BUILTIN\Users:(OI)(CI)(ID)R
       NT AUTHORITY\Authenticated Users:(ID)C
       NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(ID)C