CVE-2015-7358
First published: Mon Oct 02 2017(Updated: )
The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted volume over an existing drive letter and gain privileges via an entry in the /GLOBAL?? directory.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| nCipher | <=0.7.5.0 | |
| VeraCrypt | <=1.14 | |
| TrueCrypt | =7.0 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/133878/Truecrypt-7-Derived-Code-Windows-Drive-Letter-Symbolic-Link-Creation-Privilege-Escalation.html
- http://www.openwall.com/lists/oss-security/2015/09/22/7
- http://www.openwall.com/lists/oss-security/2015/09/24/3
- https://code.google.com/p/google-security-research/issues/detail?id=538
- https://veracrypt.codeplex.com/wikipage?title=Release%20Notes
- https://www.exploit-db.com/exploits/38403/
Frequently Asked Questions
What is the severity of CVE-2015-7358?
CVE-2015-7358 is classified as a high severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2015-7358?
To fix CVE-2015-7358, upgrade TrueCrypt to version 7.1 or later, VeraCrypt to version 1.15 or later, or CipherShed to a fixed version.
What systems are affected by CVE-2015-7358?
CVE-2015-7358 affects TrueCrypt 7.0, VeraCrypt versions up to 1.14, and CipherShed versions up to 0.7.5.0 on Windows.
What type of vulnerability is CVE-2015-7358?
CVE-2015-7358 is a privilege escalation vulnerability that allows local users to mount encrypted volumes improperly.
What can an attacker do with CVE-2015-7358?
An attacker can exploit CVE-2015-7358 to gain elevated privileges by mounting an encrypted volume over an existing drive letter.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ciphershed
- canonical/ncipher
- version/ncipher/0.7.5.0
- vendor/idrix
- canonical/veracrypt
- version/veracrypt/1.14
- vendor/truecrypt
- canonical/truecrypt
- version/truecrypt/7.0
- vendor/microsoft
- canonical/microsoft windows