itm4n / cves

Random CVEs

CVEs

CVE ID	Title
CVE-2021-27091	RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
CVE-2020-1194	Microsoft Windows Tracing Arbitrary Directory Create
CVE-2020-1170	Microsoft Windows Defender Elevation of Privilege Vulnerability
CVE-2020-1029	Microsoft Windows DiagTrack Arbitrary File Delete
CVE-2020-0863	Microsoft Windows DiagTrack 'UtcApi_DownloadLatestSettings' Arbitrary File Read
CVE-2020-0787	Microsoft Windows BITS Arbitrary File Move Local Privilege Escalation
CVE-2020-0753	Microsoft Windows Error Reporting Arbitrary File Delete
CVE-2020-0668	Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability
CVE-2019-19544	CA Dollar Universe 5.3.3 'uxdqmsrv' - Privilege escalation via a vulnerable setuid binary
CVE-2017-13130	BMC Patrol 'mcmnm' - Privilege escalation via a vulnerable setuid binary

cves's Issues

CVE-2019-19544

FYI, we have assigned CVE-2019-19544 to this issue:
https://github.com/itm4n/CVEs/tree/master/ca-dollaru-uxdqmsrv-privesc

Description has been submitted to Mitre, but they have not updated their db yet.

Quick Question

Hey there, great work on this PoC!

Is this by any means related to CVE-2020-1163? They seem to be very similar, both result in arbitrary deletion and both use Defender, and - iirc - they have both been released at the same time. But I couldn't find a POC for 1163 anywhere on the internet.

I was wondering if it's worth finding one, or if they are both related (which would mean if one is patched on a test bench, the other would fail as well)

Cheers!