PT-2004-3071 · Microsoft · Internet Connection Firewall+1

Publicado 2004-12-31 · Atualizado 2008-09-05 · CVE-2004-2176

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP2

Description The issue concerns the Internet Connection Firewall (ICF) in Microsoft Windows XP SP2, which is configured by default to trust sessmgr.exe. This trust allows local users to utilize sessmgr.exe for creating a local listening port, effectively bypassing the ICF access controls.

Recommendations For Microsoft Windows XP SP2, consider restricting access to sessmgr.exe to prevent its misuse in bypassing ICF controls. As a temporary workaround, limiting the functionality of sessmgr.exe can help minimize the risk of exploitation until a more permanent solution is available.

Exploit

Correção

Identificadores relacionados

CVE-2004-2176

Produtos afetados

Internet Connection Firewall

Windows Xp Sp2

Referências · 4

• 🔥 http://securityfocus.com/bid/11410 · Exploit
• 🔥 https://exploit-db.com/exploits/24682 · Exploit
• http://securityfocus.com/archive/1/378508 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2176 · Nota de Segurança