PT-2017-3023 · Microsoft · Windows

Publicado 2017-05-24 · Atualizado 2017-05-24

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description The issue is related to a flaw in the implementation of the NT LAN Manager (NTLM) network authentication protocol in the Windows operating system. This flaw can be exploited by a remote attacker to gain access to user password hashes using a specially crafted SCF file placed in a publicly accessible network resource.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-303

Identificadores relacionados

BDU:2017-02381

Produtos afetados

Windows

Referências · 6

• http://sysadminjd.com/adv170014-ntlm-sso-exploitation-guide · Nota
• https://xakep.ru/2017/10/30/scf-windows-bug · Nota
• http://exploit.kitploit.com/2017/10/windows-ntlm-auth-hash-disclosure.html · Nota
• https://securitylab.ru/news/489392.php · Nota
• https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV170014 · Nota
• https://bdu.fstec.ru/vul/2017-02381 · Nota de Segurança