PT-2014-5697 · Microsoft · Windows Server 2003 Sp2+1

Tomislav Paskalev · Published 2014-11-11 · Updated 2018-10-12 · CVE-2014-4076

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2

Description The issue is caused by the Windows TCP/IP stack failing to properly handle objects in memory during IOCTL processing, allowing an attacker to run arbitrary code in the context of another process. If the process runs with administrator privileges, an attacker could install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows Server 2003 SP2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-4076

Affected Products

Windows Server 2003 Sp2

Windows

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms14_070_tcpip_ioctl.rb · Exploit
• 🔥 http://exploit-db.com/exploits/35936 · Exploit
• 🔥 https://exploit-db.com/exploits/37755 · Exploit
• 🔥 https://exploit-db.com/exploits/35936 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-070 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4076 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-4076 · Security Note
• http://osvdb.org/114532 · Note
• http://technet.microsoft.com/security/bulletin/ms14-070 · Note
• http://securityfocus.com/bid/70976 · Note