|
Windows Insecure Service Permissions Privilege Escalation
|
|
Secunia Advisory:
|
SA18756
|
|
|
Release Date:
|
2006-02-08
|
|
Last Update:
|
2006-03-14
|
|
Popularity:
|
18,507 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Privilege escalation
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Web Edition
Microsoft Windows XP Home Edition
Microsoft Windows XP Professional
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Sudhakar Govindavajhala and Andrew W. Appel have reported some security issues in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges.
Insecure SERVICE_CHANGE_CONFIG permissions on the UPNPHost, NetBT, SCardSvr, DHCP, DnsCache, and SSDPSRV services can be exploited to gain escalated privileges by changing the associated program set to run by an identified service.
Successful exploitation allows an arbitrary program to be executed when an affected service is restarted.
The security issues have been reported in Windows XP SP1 (all listed services) and Windows Server 2003 (NetBT service). The vendor reports that Windows XP SP2 and Windows Server 2003 SP1 are unaffected.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
