PT-2014-5697 · Microsoft · Windows Server 2003 Sp2+1

Tomislav Paskalev · Publicado 2014-11-11 · Atualizado 2018-10-12 · CVE-2014-4076

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2

Description The issue is caused by the Windows TCP/IP stack failing to properly handle objects in memory during IOCTL processing, allowing an attacker to run arbitrary code in the context of another process. If the process runs with administrator privileges, an attacker could install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows Server 2003 SP2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-4076

Produtos afetados

Windows Server 2003 Sp2

Windows

Referências · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms14_070_tcpip_ioctl.rb · Exploit
• 🔥 http://exploit-db.com/exploits/35936 · Exploit
• 🔥 https://exploit-db.com/exploits/37755 · Exploit
• 🔥 https://exploit-db.com/exploits/35936 · Exploit
• http://osvdb.org/114532 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-070 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4076 · Nota de Segurança
• http://technet.microsoft.com/security/bulletin/ms14-070 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4076 · Nota de Segurança
• http://securityfocus.com/bid/70976 · Nota