PT-2011-3524 · Microsoft · Windows Server 2008 R2+2

Publicado 2011-09-15 · Atualizado 2020-09-28 · CVE-2011-1984

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1

Description The issue allows local users to gain privileges by sending crafted packets over the loopback interface.

Recommendations For Microsoft Windows Server 2003 SP2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 SP2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 R2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 R2 SP1, update to a version that includes the fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-1984

Produtos afetados

Windows Server 2003 Sp2

Windows Server 2008 R2

Windows Server 2008 R2 Sp1

Referências · 6

• 🔥 https://exploit-db.com/exploits/17831 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12634 · Nota
• http://us-cert.gov/cas/techalerts/TA11-256A.html · Nota
• http://securityreason.com/securityalert/8378 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1984 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-070 · Aviso do Fabricante