01 Record
Local Privilege Escalation via Insecure DLL Permissions in Remote Utilities Host <=7.7.3.0
Local Privilege Escalation via Insecure DLL Permissions in Remote Utilities Host <=7.7.3.0
* Remove Everyone:(F) ACL from all DLL files under the installation directory. Restrict to: SYSTEM (Full Control), Administrators (Full Control), Users/Authenticated Users (Read & Execute). Enforce recursively in installer, update routine, and repair mechanism. * Implement cryptographic signature verification of all loaded DLLs at service startup. * Use atomic DLL replacement during updates (write to temp path, verify signature, rename).