← Advisories

Telefonica O2 Connection Manager 3.4 Local Privilege Escalation Vulnerability

Low
Advisory ID
ZSL-2014-5199
Release Date
09 October 2014
Vendor
Telefonica S.A. - http://www.telefonica.com
Affected Version
3.4.R1 (108)
CVE
N/A
Tested On
Microsoft Windows 7 Professional SP1 (EN), Microsoft Windows 7 Ultimate SP1 (EN)
Summary

O2 Connection Manager will help you to manage your internet connections by getting you connected to the fastest available network. Automatically connect you to the fastest available network including your home broadband if you have a wireless router.

Description

O2 Connection Manager suffers from an elevation of privileges vulnerability which can be used by a simple user that can change the executable files with a binary of choice. The vulnerability exist due to the improper permissions, with the 'F' flag (Full) for 'Everyone' group, making the entire directory 'O2 Connection Manager' and its files and sub-dirs world-writable.

Proof of Concept
Disclosure Timeline
22.09.2014Vulnerability discovered.
23.09.2014Contact with the vendor.
08.10.2014No reply from the vendor.
09.10.2014Public security advisory released.
Credits
Vulnerability discovered by Gjoko Krstic
References
Changelog
09.10.2014Initial release
10.10.2014Added reference [1], [2] and [3]
11.10.2014Added reference [4]
14.10.2014Added reference [5]
20.10.2014Added reference [6]