https://pwnwiki.com/index.php?action=history&feed=atom&title=Odoo_12.0.20190101_-_%27nssm.exe%27_Unquoted_Service_Path 2026-04-11T14:41:22Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=Odoo_12.0.20190101_-_%27nssm.exe%27_Unquoted_Service_Path&diff=2786&oldid=prev 2021-05-12T00:56:46Z

<p>Created page with &quot;==EXP== &lt;pre&gt; # Exploit Title: Odoo 12.0.20190101 - &#039;nssm.exe&#039; Unquoted Service Path # Exploit Author: 1F98D # Vendor Homepage: https://www.odoo.com/ # Software Link: https:/...&quot;</p> <p><b>New page</b></p><div>==EXP==<br /> &lt;pre&gt;<br /> # Exploit Title: Odoo 12.0.20190101 - 'nssm.exe' Unquoted Service Path<br /> # Exploit Author: 1F98D<br /> # Vendor Homepage: https://www.odoo.com/<br /> # Software Link: https://nightly.odoo.com/12.0/nightly/windows/odoo_12.0.20190101.exe<br /> # Tested Version: 12.0.20190101<br /> # Tested on OS: Windows <br /> # Step to discover Unquoted Service Path:<br /> <br /> C:\&gt; icacls &quot;C:\Program Files (x86)\Odoo 12.0\nssm&quot;<br /> <br /> C:\Program Files (x86)\Odoo 12.0\nssm pc-1\user-1:(OI)(CI)(M)<br /> NT SERVICE\TrustedInstaller:(I)(F)<br /> NT SERVICE\TrustedInstaller:(I)(CI)(IO)(F)<br /> NT AUTHORITY\SYSTEM:(I)(F)<br /> NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)<br /> BUILTIN\Administrators:(I)(F)<br /> BUILTIN\Administrators:(I)(OI)(CI)(IO)(F)<br /> BUILTIN\Users:(I)(RX)<br /> BUILTIN\Users:(I)(OI)(CI)(IO)(GR,GE)<br /> CREATOR OWNER:(I)(OI)(CI)(IO)(F)<br /> APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(I)(RX)<br /> APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(I)(OI)(CI)(IO)(GR,GE)<br /> APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(I)(RX)<br /> APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(I)(OI)(CI)(IO)(GR,GE)<br /> <br /> &lt;/pre&gt;</div>

Pwnwiki