CVE-2020-0668
HIGHWindows - Elevation of Privilege via Kernel Memory Object Handling
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2020-0668.
PoCs published by RedCursorSecurityConsulting, ycdxsb, Nan3r, including Metasploit module exploits/windows/local/cve_2020_0668_service_tracing.
AI-analyzed exploit summary This PoC exploits CVE-2020-0668, a Windows privilege escalation vulnerability, by abusing symbolic links and the RAS tracing mechanism to move arbitrary files to privileged locations. It demonstrates the vulnerability by moving a specified DLL file to a target location with elevated privileges.
Description
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.
Exploits (7)
This PoC exploits CVE-2020-0668, a Windows privilege escalation vulnerability, by abusing symbolic links and the RAS tracing mechanism to move arbitrary files to privileged locations. It demonstrates the vulnerability by moving a specified DLL file to a target location with elevated privileges.
This repository contains a working exploit for CVE-2020-0668, a Windows privilege escalation vulnerability. The exploit leverages symbolic link manipulation and registry modifications to achieve arbitrary file write, allowing an attacker to place a malicious DLL in a system directory.
This PowerShell script exploits CVE-2020-0668, a privilege escalation vulnerability in Windows Print Spooler. It leverages a malicious DLL and a crafted phonebook file to achieve local privilege escalation by hijacking the PrintConfig.dll.
This repository contains a proof-of-concept exploit for CVE-2020-0668, a Windows privilege escalation vulnerability. The code includes utilities for directory object manipulation, file operations, and symbolic link handling, which are used to exploit the vulnerability.
This repository is a README file referencing another GitHub repository for CVE-2020-0668, which is a Windows Remote Code Execution vulnerability. It does not contain any exploit code or proof-of-concept.
This PowerShell script exploits CVE-2021-1675 (PrintNightmare) to add a new local administrator user or execute a custom DLL with SYSTEM privileges. It leverages the Windows Print Spooler service to load a malicious driver, achieving local privilege escalation.
This Metasploit module exploits CVE-2020-0668, a privilege escalation vulnerability in Windows 10 x64, by leveraging a trusted file overwrite with DLL hijacking to gain SYSTEM-level access. It uses registry manipulation, mount points, and symlinks to trigger the exploit.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H