PT-2015-3408 · Microsoft · Windows

Henry Li · Publicado 2015-01-13 · Atualizado 2025-04-04 · CVE-2015-0016

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue is related to a directory traversal vulnerability in the TS WebProxy component, which allows remote attackers to gain privileges via a crafted pathname in an executable file. This can lead to a transition from Low Integrity to Medium Integrity. The vulnerability is associated with insufficient checking of the pathname to a directory with restricted access.

Recommendations For Microsoft Windows versions prior to the fixed version, consider disabling the TS WebProxy component until a patch is available. Restrict access to the TS WebProxy component to minimize the risk of exploitation. Avoid using crafted pathnames in executable files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2021-04946

CVE-2015-0016

Produtos afetados

Windows

Referências · 16

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms15_004_tswbproxy.rb · Exploit
• 🔥 http://exploit-db.com/exploits/35983 · Exploit
• 🔥 http://packetstormsecurity.com/files/130201/MS15-004-Microsoft-Remote-Desktop-Services-Web-Proxy-IE-Sandbox-Escape.html · Exploit
• 🔥 http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2015-0016-escaping-the-internet-explorer-sandbox · Exploit
• 🔥 https://exploit-db.com/exploits/35983 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99515 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0016 · Nota de Segurança
• http://securityfocus.com/bid/71965 · Nota
• https://bdu.fstec.ru/vul/2021-04946 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99516 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-004 · Aviso do Fabricante
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Nota
• https://t.me/cvenotify/117905 · Publicação no Telegram
• http://securitytracker.com/id/1031524 · Nota
• http://secunia.com/advisories/62076 · Nota