PT-2006-2483 · Microsoft · Windows Xp Sp2+2

Publicado 2006-03-29 · Atualizado 2018-10-18 · CVE-2006-1475

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Windows XP SP2

Description The issue concerns the Windows Firewall in Microsoft Windows XP SP2, where it does not produce application alerts when an application is executed using the NTFS Alternate Data Streams (ADS) filename:stream syntax. This could allow local users to launch a Trojan horse attack without the victim receiving the alert that Windows Firewall would have produced for a non-ADS file. NTFS Alternate Data Streams (ADS) is a feature of the NTFS file system that allows multiple streams of data to be associated with a single file.

Recommendations For Windows XP SP2, consider disabling the use of NTFS Alternate Data Streams (ADS) to minimize the risk of exploitation, or apply specific configuration changes to the Windows Firewall to handle ADS executions appropriately. However, specific steps for these configurations are not provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-1475

Produtos afetados

Ntfs

Windows Firewall

Windows Xp Sp2

Referências · 4

• http://securityfocus.com/archive/1/428970/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1475 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25597 · Nota
• http://securityfocus.com/archive/1/429111/100/0/threaded · Nota