#iphone apple.iphone.wikipedia c275-ch2 c275-ch4 computers infosec internet irc ism6231 jailbreak linux psst secbase security securitygateway web

My tags:

From Wikipedia, the free encyclopedia

Privilege escalation is the act of exploiting a bug or design flaw in a software application to gain access to resources which normally would have been protected from an application or user. The result is that the application performs actions with more privileges than intended by the application developer or system administrator.

Contents 1 Background 2 Vertical privilege escalation 2.1 Examples of vertical privilege escalation 2.2 Mitigation strategies 3 Horizontal privilege escalation 3.1 Examples of horizontal privilege escalation 4 See also 5 References

[edit] Background

Privilege escalation occurs when an application with elevated privileges has a bug that allows security to be bypassed, or alternatively, flawed assumptions about how it will be used. Privilege escalation occurs in two forms:

• Vertical privilege escalation, also known as privilege elevation, where a lower privilege user accesses functions or content reserved for higher privilege users (e.g. Internet Banking User A accesses Administrator functions)
• Horizontal privilege escalation, where a normal user accesses functions or content reserved for other normal users (e.g. Internet Banking User A accesses the Internet bank account of User B)

[edit] Vertical privilege escalation

This type of privilege escalation occurs when the user or process is able to obtain a higher level of access than an administrator or system developer intended.

[edit] Examples of vertical privilege escalation

In some cases a high-privilege application assumes that it will only be provided with input that matches its interface specification, and doesn't validate the input. An attacker may then be able to exploit this assumption so that unauthorized code is run with the application's privileges:

• Some Windows services are configured to run under the Local System user account. A vulnerability such as a buffer overflow may be used to execute arbitrary code with privilege elevated to Local System. Alternatively, a system service that is impersonating a lesser user can elevate that user's privileges if errors are not handled correctly while the user is being impersonated (e.g. if the user has introduced a malicious error handler)
• Under some legacy versions of the Microsoft Windows operating system, the All Users screensaver runs under the Local System account - any account that can replace the current screensaver binary in the file system or Registry can therefore elevate privileges.
• In certain versions of the Linux kernel it was possible to write a program that would set its current directory to /etc/cron.d, request that a core dump be performed in case it crashes and then have itself killed by another process. The core dump file would have been placed at the program's current directory, that is, /etc/cron.d, and cron would have treated it as a text file instructing it to run programs on schedule. Because the contents of the file would be under attacker’s control, the attacker would be able to execute any program with root privileges.
• Cross Zone Scripting is a type of privilege escalation attack in which a website subverts the security model of web browsers so that it can run malicious code on client computers.
• A jailbreak is the act or tool used to perform the act of breaking out of a chroot or jail in UNIX-like operating systems or bypassing digital rights management (DRM). In the former case, it allows the user to see files outside of the filesystem that the administrator intends to make available to the application or user in question. In the context of DRM, this allows the user to run arbitrarily defined code on DRM-encumbered devices as well as break out of chroot-like restrictions. DRM-encumbered devices such as the Xbox, PSP, iPhone, and iPod touch have repeatedly been subject to jailbreaks, allowing the execution of arbitrary code, but have had those jailbreaks disabled by vendor updates.

• The iPhone in particular has been a fertile battle ground ^[1][2] The iPod Touch/iPhone hacking community however, responds to the newest vendor updates by creating new ways to enable third party apps almost immediately. It was only in the wake of the popularity of the iPhone that the term jailbreaking became well known in popular culture worldwide.^{[citation needed]}
• There are also situations where an application can use other high privilege services and has incorrect assumptions about how a client could manipulate its use of these services. An application that can execute Command line or shell commands could have a Shell Injection vulnerability if it uses unvalidated input as part of an executed command. An attacker would then be able to run system commands using the application's privileges.

[edit] Mitigation strategies

Operating systems and users can use the following strategies to reduce the risk of privilege escalation:

• Data Execution Prevention
• Address space layout randomization (to make it harder for buffer overruns to execute privileged instructions at known addresses in memory)
• Running applications with least privilege (for example by running Internet Explorer with the Administrator SID disabled in the process token) in order to reduce the ability of buffer overrun exploits to abuse the privileges of an elevated user.
• Requiring kernel mode code to be digitally signed.
• Use of up-to-date antivirus software
• Patching
• Use of compilers that trap buffer overruns^[3]
• Encryption of software and/or firmware components.

[edit] Horizontal privilege escalation

Horizontal privilege escalation occurs when an application allows the attacker to gain access to resources which normally would have been protected from an application or user. The result is that the application performs actions with the same but different security context than intended by the application developer or system administrator; this is effectively a limited form of privilege escalation (specifically, the unauthorized assumption of the capability of impersonating other users).

[edit] Examples of horizontal privilege escalation

This problem often occurs in web applications. Consider the following example:

• User A has access to his/her bank account in an Internet Banking application.
• User B has access to his/her bank account in the same Internet Banking application.
• The vulnerability occurs when User A is able to access User B's bank account by performing some sort of malicious activity.

This malicious activity may be possible due to common web application weaknesses or vulnerabilities.

Potential web application vulnerabilities that may lead to this condition include:

• Predictable session ID's in the user's HTTP cookie
• Session fixation
• Cross-site Scripting
• Easily guessable passwords

[edit] See also

• Principle of least privilege
• Privilege separation
• Privilege revocation
• Defensive programming
• World Wide Web security

[edit] References

1. ^ James Quintana Pearce (2007-09-27), Apple's Disagreement With Orange, IPhone Hackers, Forbes, http://www.forbes.com/technology/2007/09/27/apple-orange-iphone-tech-cx_pco_0927paidcontent.html, retrieved on 2008-08-04 
2. ^ Reports: Next iPhone update will break third-party apps, bust unlocks ComputerWorld on v1.1.3
3. ^ "Microsoft Minimizes Threat of Buffer Overruns, Builds Trustworthy Applications". Microsoft. September 2005. http://download.microsoft.com/documents/customerevidence/12374_Microsoft_GS_Switch_CS_final.doc. Retrieved on 2008-08-04.