CVEvulnerability
CVE-2008-5725
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-12-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory.
Affected configurations
• entechtaiwan powerstrip (<= 3.84)
• entechtaiwan powerstrip 3.00
• entechtaiwan powerstrip 3.01
• entechtaiwan powerstrip 3.02
• entechtaiwan powerstrip 3.10
• entechtaiwan powerstrip 3.11
• entechtaiwan powerstrip 3.12
• entechtaiwan powerstrip 3.15
• entechtaiwan powerstrip 3.16
• entechtaiwan powerstrip 3.18
• entechtaiwan powerstrip 3.20
• entechtaiwan powerstrip 3.25
• entechtaiwan powerstrip 3.26
• entechtaiwan powerstrip 3.28
• entechtaiwan powerstrip 3.29
• entechtaiwan powerstrip 3.30
• entechtaiwan powerstrip 3.40
• entechtaiwan powerstrip 3.43
• entechtaiwan powerstrip 3.44
• entechtaiwan powerstrip 3.45
• entechtaiwan powerstrip 3.46
• entechtaiwan powerstrip 3.47
• entechtaiwan powerstrip 3.49
• entechtaiwan powerstrip 3.50
• entechtaiwan powerstrip 3.51
• entechtaiwan powerstrip 3.52
• entechtaiwan powerstrip 3.53
• entechtaiwan powerstrip 3.54
• entechtaiwan powerstrip 3.55
• entechtaiwan powerstrip 3.56
• entechtaiwan powerstrip 3.57
• entechtaiwan powerstrip 3.58
• entechtaiwan powerstrip 3.59
• entechtaiwan powerstrip 3.60
• entechtaiwan powerstrip 3.61
• entechtaiwan powerstrip 3.62
• entechtaiwan powerstrip 3.63
• entechtaiwan powerstrip 3.64
• entechtaiwan powerstrip 3.65
• entechtaiwan powerstrip 3.70
• entechtaiwan powerstrip 3.72
• entechtaiwan powerstrip 3.73
• entechtaiwan powerstrip 3.74
• entechtaiwan powerstrip 3.75
• entechtaiwan powerstrip 3.76
• entechtaiwan powerstrip 3.77
• entechtaiwan powerstrip 3.78
• entechtaiwan powerstrip 3.80
• entechtaiwan powerstrip 3.81
• entechtaiwan powerstrip 3.83
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/33249 Vendor Advisory
- http://securityreason.com/securityalert/4809 securityreason.com
- http://www.ntinternals.org/ntiadv0810/ntiadv0810.html Exploit
- http://www.securityfocus.com/bid/32961 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47532 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7533 www.exploit-db.com
- http://secunia.com/advisories/33249 Vendor Advisory
- http://securityreason.com/securityalert/4809 securityreason.com
- http://www.ntinternals.org/ntiadv0810/ntiadv0810.html Exploit
- http://www.securityfocus.com/bid/32961 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47532 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7533 www.exploit-db.com