Permissions, Privileges, and Access Controls in Microsoft Windows and Windows Server - CVE-2020-0787

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the way Windows Background Intelligent Transfer Service (BITS) handles symbolic links. A local user can create a malicious application, launch it on the system and overwrite a targeted file leading to an elevated status.

To exploit this vulnerability, an attacker would first have to log on to the system.

Affected software

How to mitigate CVE-2020-0787

Links to Public Exploits and PoC-codes

• Exploit #7029 - CVE-2020-0787 (CVE-2020-0787的简单回显) (November 17, 2021)
• Exploit #3462 - CVE-2020-0787-EXP-ALL-WINDOWS-VERSION (Support ALL Windows Version) (July 15, 2020)
• Exploit #3031 - Background Intelligent Transfer Service Arbitrary File Move Privilege Elevation Vulnerability (June 19, 2020)

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0787

Related Security Bulletins

• Privilege escalation in Microsoft Windows Background Intelligent Transfer Service
• Multiple vulnerabilities in Dell EMC Unisphere for PowerMax and Dell EMC Solutions Enabler