PT-2006-4104 · Microsoft · Windows Xp

Daniel Hckmann + 1 · Publicado 2006-06-24 · Atualizado 2024-08-07 · CVE-2006-3209

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP

Description The Task scheduler (at.exe) on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to gain privileges. Note that this issue has been disputed by third parties, who state that the Task scheduler is limited to the Administrators group by default upon installation.

Recommendations For Microsoft Windows XP, consider restricting access to the Task scheduler to minimize the risk of exploitation. As a temporary workaround, limit the privileges of scheduled processes to prevent local users from gaining elevated permissions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3209

Produtos afetados

Windows Xp

Referências · 5

• http://securityreason.com/securityalert/1137 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3209 · Nota de Segurança
• http://securityfocus.com/archive/1/436884/100/200/threaded · Nota
• https://t.me/cvenotify/89786 · Publicação no Telegram
• http://securityfocus.com/archive/1/436810/100/200/threaded · Nota