CVE-2015-7358

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted volume over an existing drive letter and gain privileges via an entry in the /GLOBAL?? directory.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/133878/Truecrypt-7-Derived-Code-Windows-Drive-Letter-Symbolic-Link-Creation-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2015/09/22/7Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/09/24/3Issue Tracking, Mailing List, Third Party Advisory
https://code.google.com/p/google-security-research/issues/detail?id=538Third Party Advisory
https://veracrypt.codeplex.com/wikipage?title=Release%20NotesRelease Notes, Vendor Advisory
https://www.exploit-db.com/exploits/38403/Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/133878/Truecrypt-7-Derived-Code-Windows-Drive-Letter-Symbolic-Link-Creation-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2015/09/22/7Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/09/24/3Issue Tracking, Mailing List, Third Party Advisory
https://code.google.com/p/google-security-research/issues/detail?id=538Third Party Advisory
https://veracrypt.codeplex.com/wikipage?title=Release%20NotesRelease Notes, Vendor Advisory
https://www.exploit-db.com/exploits/38403/Third Party Advisory, VDB Entry

Timeline

Published: Oct 3, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-73597.8The (1) IsVolumeAccessibleByCurrentUser and (2) MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, w CVE-2015-73606.1Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface (WebUI) in Fortinet FortiSandbox before 2.1 allow remote attac CVE-2015-73619.3FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not require authenticat CVE-2015-73627.8Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, allo CVE-2015-73635.4Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in CVE-2015-73646.8The HTML_Quickform library, as used in Revive Adserver before 3.2.2, allows remote attackers to bypass the CSRF protection mechanism via an CVE-2015-73654.3Cross-site scripting (XSS) vulnerability in the plugin upgrade form in Revive Adserver before 3.2.2 allows remote attackers to inject arbitr CVE-2015-73666.8Multiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.2.2 allow remote attackers to hijack the authenticati CVE-2015-73677.5Revive Adserver before 3.2.2 allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has be CVE-2015-73682.1Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local us CVE-2015-73697.5The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which CVE-2015-73704.3Multiple cross-site scripting (XSS) vulnerabilities in open-flash-chart.swf in Open Flash Chart 2, as used in the VideoAds plugin in Revive