Zero-Day Advisory
Fortinet Discovers Microsoft Windows Storage Service Elevation of Privilege Vulnerability
Summary
Fortinet's FortiGuard Labs has discovered a local privilege escalation vulnerability in Microsoft Storage Services.
Microsoft Storage Service is a remote procedure call (RPC) service that provides enabling services for storage settings and external storage expansion.
The local elevation of privilege happens when an attacker creates bogus symbolic link for predictable files and folders created by Storage Services that allows unprivileged users overwrite discretionary access control of escalated files.
Solutions
FortiGuard Labs released the following FortiGate IPS signature which covers this specific vulnerability:MS.RPC.StorSvc.Privilege.Escalation
Released Jan 08, 2019
Users should apply the solution provided by Microsoft.
Timeline
Fortinet reported the vulnerability to Microsoft on October 15, 2018.
Microsoft confirmed the vulnerability on November 11, 2018.
Microsoft patched the vulnerability on February 13, 2018.