Summary
The Windows binary of the Creditcoin node loads a suite of DLLs provided by Microsoft at startup. If a malicious user has access to overwrite the program files directory it is possible to replace these DLLs and execute arbitrary code. For more details on this type of binary planting attack please refer to this OWASP.org article.
Details
The DLLs loaded at startup on Windows are the following:
- iphlpapi.dll - Windows networking subsystem
- bcrypt.dll - Windows cryptographic primitives
- MSVCP140.dll - Part of Microsoft C++ Runtime library
- VCRUNTIME140.dll - Part of the visual studio runtime
- VCRUNTIME140_1.dll - More runtime stuff
- VCRUNTIME140.dll - runtime
- VCRUNTIME140_1.dll - runtime
- CRYPTBASE.DLL - Microsoft cryptographic API
Impact
It is the view of the blockchain development team that the threat posed by a hypothetical binary planting attack is minimal and represents a low-security risk. The vulnerable DLL files are from the Windows networking subsystem, the Visual C++ runtime, and low-level cryptographic primitives. Collectively these dependencies are required for a large ecosystem of applications, ranging from enterprise-level security applications to game engines, and don’t represent a fundamental lack of security or oversight in the design and implementation of Creditcoin. The blockchain team takes the stance that running Creditcoin on Windows is officially unsupported and at best should be thought of as experimental.
Credits
Originally disclosed by dobermann-pinscher at https://huntr.com/bounties/2effbbcb-47a7-426e-b022-900aa966367f/
zacharyfrederick Remediation developer
dobermann-pinscher Reporter
Summary
The Windows binary of the Creditcoin node loads a suite of DLLs provided by Microsoft at startup. If a malicious user has access to overwrite the program files directory it is possible to replace these DLLs and execute arbitrary code. For more details on this type of binary planting attack please refer to this OWASP.org article.
Details
The DLLs loaded at startup on Windows are the following:
Impact
It is the view of the blockchain development team that the threat posed by a hypothetical binary planting attack is minimal and represents a low-security risk. The vulnerable DLL files are from the Windows networking subsystem, the Visual C++ runtime, and low-level cryptographic primitives. Collectively these dependencies are required for a large ecosystem of applications, ranging from enterprise-level security applications to game engines, and don’t represent a fundamental lack of security or oversight in the design and implementation of Creditcoin. The blockchain team takes the stance that running Creditcoin on Windows is officially unsupported and at best should be thought of as experimental.
Credits
Originally disclosed by dobermann-pinscher at https://huntr.com/bounties/2effbbcb-47a7-426e-b022-900aa966367f/