Loading vulnerability…
Local Privilege Escalation in AspEmail 5.6.0.2 EmailAgent Service
AspEmail 5.6.0.2 contains an incorrect permission assignment affecting the BIN directory. Local users with full write permission to that directory can replace the executable used by the Persits Software EmailAgent service. When the service executes the substituted binary, an attacker can obtain elevated system access.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation enables a local attacker to gain elevated system access by replacing the EmailAgent service executable.
If you can’t patch tonight, do this now.
Restrict write permissions on the AspEmail BIN directory so unprivileged local users cannot modify or replace service executables.
Patch, then assume compromise.
Apply vendor updates for AspEmail when available.
No public exploits tracked yet. Mallory keeps watching.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.