PT-2004-3071 · Microsoft · Internet Connection Firewall+1

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-2176

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP2

Description The issue concerns the Internet Connection Firewall (ICF) in Microsoft Windows XP SP2, which is configured by default to trust sessmgr.exe. This trust allows local users to utilize sessmgr.exe for creating a local listening port, effectively bypassing the ICF access controls.

Recommendations For Microsoft Windows XP SP2, consider restricting access to sessmgr.exe to prevent its misuse in bypassing ICF controls. As a temporary workaround, limiting the functionality of sessmgr.exe can help minimize the risk of exploitation until a more permanent solution is available.

Exploit

Fix

Related Identifiers

CVE-2004-2176

Affected Products

Internet Connection Firewall

Windows Xp Sp2

References · 4

• 🔥 http://securityfocus.com/bid/11410 · Exploit
• 🔥 https://exploit-db.com/exploits/24682 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2176 · Security Note
• http://securityfocus.com/archive/1/378508 · Note