CVEvulnerability
CVE-2015-7358
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-10-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted volume over an existing drive letter and gain privileges via an entry in the /GLOBAL?? directory.
Affected configurations
• ciphershed ciphershed (<= 0.7.5.0)
• idrix veracrypt (<= 1.14)
• truecrypt truecrypt 7.0
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/133878/Truecrypt-7-Derived-Code-Windows-Drive-Letter-Symbolic-Link-Creation-Privilege-Escalation.html Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2015/09/22/7 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/09/24/3 Issue Tracking, Mailing List, Third Party Advisory
- https://code.google.com/p/google-security-research/issues/detail?id=538 Third Party Advisory
- https://veracrypt.codeplex.com/wikipage?title=Release%20Notes Release Notes, Vendor Advisory
- https://www.exploit-db.com/exploits/38403/ Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/133878/Truecrypt-7-Derived-Code-Windows-Drive-Letter-Symbolic-Link-Creation-Privilege-Escalation.html Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2015/09/22/7 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/09/24/3 Issue Tracking, Mailing List, Third Party Advisory
- https://code.google.com/p/google-security-research/issues/detail?id=538 Third Party Advisory
- https://veracrypt.codeplex.com/wikipage?title=Release%20Notes Release Notes, Vendor Advisory
- https://www.exploit-db.com/exploits/38403/ Third Party Advisory, VDB Entry