Skip to Main ContentSkip to Footer
Advisory

ElectricCommander Local Privilege Escalation

Dell SecureWorks Security Advisory SWRX-2014-010

October 22, 2014

Advisory Information

  • Title: ElectricCommander Local Privilege Escalation
  • Advisory ID: SWRX-2014-010
  • Date published: Wednesday, October 22, 2014
  • CVE: CVE-2014-7180
  • CVSS v2 base score: 7.2
  • Date of last update: Wednesday, October 22, 2014
  • Vendors contacted: Electric Cloud, Inc.
  • Release mode: Coordinated
  • Discovered by: Sean Wright, Dell SecureWorks

Summary

ElectricCommander is a toolset that facilitates remote deployment of environment configurations from a centralized server to attached agents. Due to excessive file system permissions on two Perl source code files, an unprivileged local attacker can modify these files to insert code. The attacker's code is then executed as the privileged user running these administrative tools.

Download the PDF: SWRX-2014-010

PGP Signature

ABOUT THE AUTHOR
COUNTER THREAT UNIT RESEARCH TEAM
Secureworks Counter Threat Unit™ (CTU) researchers frequently serve as expert resources for the media, publish technical analyses for the security community, and speak about emerging threats at security conferences. Leveraging Secureworks’ advanced security technologies and a network of industry contacts, the CTU™ research team tracks threat actors and analyzes anomalous activity, uncovering new attack techniques and threats. This process enables CTU researchers to identify threats as they emerge and develop countermeasures that protect customers before damage can occur.
Back to more Threat Analyses and Advisories