Slashdot Mirror
New Windows Zero-Day Bug Helps Delete Any File, Exploit Available (bleepingcomputer.com)
An anonymous reader quotes a report from Bleeping Computer: Proof-of-concept code for a new zero-day vulnerability in Windows has been released by a security researcher before Microsoft was able to release a fix. The code exploits a vulnerability that allows deleting without permission any files on a machine, including system data, and it has the potential to lead to privilege escalation. The vulnerability could be used to delete application DLLs, thus forcing the programs to look for the missing libraries in other places. If the search reaches a location that grants write permission to the local user, the attacker could take advantage by providing a malicious DLL.
The problem is with Microsoft Data Sharing Service, present in Windows 10, Server 2016 and 2019 operating systems, which provides data brokering between applications. Will Dormann, a vulnerability analyst at CERT/CC, tested the exploit code successfully on a Windows 10 operating system running the latest security updates. Behind the discovery is a researcher using the online alias SandboxEscaper, also responsible for publicly sharing in late August another security bug in Windows Task Scheduler component. Microsoft hasn't addressed the issue, but there is a temporary fix available through the oPatch platform. "A micropatch candidate was ready seven hours after the zero-day vulnerability announcement, and it blocked the exploit successfully," reports Bleeping Computer. "oPatch now delivers the stable version of the micropatch for fully updated Windows 10 1803.
The problem is with Microsoft Data Sharing Service, present in Windows 10, Server 2016 and 2019 operating systems, which provides data brokering between applications. Will Dormann, a vulnerability analyst at CERT/CC, tested the exploit code successfully on a Windows 10 operating system running the latest security updates. Behind the discovery is a researcher using the online alias SandboxEscaper, also responsible for publicly sharing in late August another security bug in Windows Task Scheduler component. Microsoft hasn't addressed the issue, but there is a temporary fix available through the oPatch platform. "A micropatch candidate was ready seven hours after the zero-day vulnerability announcement, and it blocked the exploit successfully," reports Bleeping Computer. "oPatch now delivers the stable version of the micropatch for fully updated Windows 10 1803.
Trump's enemies are all getting mail bombs because uneducated racists are treasonous, violent scum.
Apple doesn't fall far from the retard-tree, traitors.
Linux
The problem is with Microsoft...
Could have just stopped right there.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
I have been avoiding the upgrade process for quite some time. My diligence has paid off!
... to remove those Win10 applications that Microsoft forbids you to remove?
What's oPatch? is it like 0patch?
What's the CVE for this exploit?
Or did the "security researcher" not disclose this to anyone before releasing it?
Probably examined the 1809 update, and duplicated its success in wiping files.
THERE WILL BE CONSEQUENCES FOR YOUR LIES KEN DOLL, as opposed to your vanilla latte "sense of humor" you boring cunt
Filter error: Don't use so many caps. It's like YELLING.
Filter error: Don't use so many caps. It's like YELLING.
Leftists are finally the target of the crap they've been pulling for decades:
1969: A Year of Bombings
The 1969 bombings were part of a wave of similar episodes across the nation that spurred fear and anxiety. (One study found that from January 1969 to October 1970, there were about 370 bombings - most of them minor - in New York, an average of more than one every other day.)
And let's not forget celebrated leftist and likely Obama ghostwriter Bill Ayers:
After the Greenwich Village townhouse explosion in 1970, in which Weatherman member Ted Gold, Ayers's close friend Terry Robbins, and Ayers's girlfriend, Diana Oughton, were killed when a nail bomb being assembled in the house exploded, Ayers and several associates evaded pursuit by law enforcement officials. Kathy Boudin and Cathy Wilkerson survived the blast. Ayers was not facing criminal charges at the time, but the federal government later filed charges against him.[7] Ayers participated in the bombings of New York City Police Department headquarters in 1970, the United States Capitol building in 1971, and the Pentagon in 1972, as he noted in his 2001 book, Fugitive Days. Ayers writes:
Although the bomb that rocked the Pentagon was itsy-bitsy—weighing close to two pounds—it caused 'tens of thousands of dollars' of damage. The operation cost under $500, and no one was killed or even hurt.[19]
After the bombing, Ayers became a fugitive. During this time, Ayers and fellow member Bernardine Dohrn married and remained fugitives together, changing identities, jobs and locations.
Nevermind last year's shooting of the House Majority Whip by a TDS-addled LEFTIST Bernie Bro shouting "This is for health care!!!"
About damn time you're the target of your own damn violent bullshit.
Isn't the easier method just to install the October release of Windows 10?
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
Ya, it's called the 2018 Windows 10 October Update :-)
It must have been something you assimilated. . . .
This is what Windows needs is even more totally worthless Windows services doing nothing but wasting resources for no reason that anyone on earth except Microsoft cares about.
Apparently common issues with this service include crashing and busy spinning CPU for no reason. Neither is there any API documentation for this "service" available for any application developer to actually make use of.
This is why Microsoft sucks not because their programmers make mistakes but because they just won't stop increasing attack surface of Windows by piling on more and more useless garbage. They just can't help themselves.
Going to delete that voice activated search now!
A 0day that will let you delete Flash...
SandboxEscaper - isnt this the guy Microsoft refused to pay up (under bug bounty program) for previous privilege elevation bug found? bad move MS.
Who logs in to gdm? Not I, said the duck.
Yet another boring security issue that is only an issue if you allow the attacker to run their malicious code on your machine.
The overlooked issue is that windows runs far too much unnecessary junk that no-one is using on everyone's machine.
Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.
I'm only half-kidding. I don't use Cortana for anything, but it's definitely undeleteable. If this bug allows me to delete files that Windows stubbornly refuses to delete, I'm all for it. Assuming I can somehow control who else can exploit it.
Fear me, bloatware! I possess the power to banish you... forever!
Fake bombs for fake news.
Seems appropriate.
Does this bug allow me to delete files currently in use by another program? That particular design flaw of Windows annoys me daily.
If I say 'delete' or 'move', the OS doesn't get to say 'No' if permissions and ACLs agree, all it is expected to do is to delete/move the file, even if in use. If done right the program who is currently using it can keep using it, for everyone else it will be gone. There might be a reason why all the *IX systems do it that way.
Usually windows blocks me from deleting files (used by another process)