G DATA Total Security GDBackupSvc Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the GDBackupSvc service. By creating a symbolic link, an attacker can abuse the service to create a file with a permissive DACL. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-20694.
References
Link | Resource |
---|---|
https://www.zerodayinitiative.com/advisories/ZDI-23-1493/ | Third Party Advisory |
https://www.zerodayinitiative.com/advisories/ZDI-23-1493/ | Third Party Advisory |
Configurations
History
18 Aug 2025, 15:32
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:gdata-software:total_security:25.5.14.95:*:*:*:*:*:*:* | |
References | () https://www.zerodayinitiative.com/advisories/ZDI-23-1493/ - Third Party Advisory | |
First Time |
Gdata-software
Gdata-software total Security |
21 Nov 2024, 08:22
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
References | () https://www.zerodayinitiative.com/advisories/ZDI-23-1493/ - |
03 May 2024, 03:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-03 03:15
Updated : 2025-08-18 15:32
NVD link : CVE-2023-42126
Mitre link : CVE-2023-42126
CVE.ORG link : CVE-2023-42126
JSON object : View
Products Affected
gdata-software
- total_security
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')