PT-2016-1171 · Microsoft · Windows 7+8

Tamas Koczka · Published 2016-02-09 · Updated 2024-10-30 · CVE-2016-0051

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Microsoft WebDAV client in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511

Description The issue is related to insufficient access restrictions in the Microsoft WebDAV client, allowing a local attacker to elevate privileges using a specially crafted application. To exploit the vulnerability, an attacker must first log on to the system. The vulnerability exists due to improper input validation by WebDAV, which could allow an attacker to execute arbitrary code with elevated permissions.

Recommendations For Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511, update to a version that includes the fix for the WebDAV client vulnerability. As a temporary workaround, consider restricting access to the WebDAV client until a patch is available. Avoid using the WebDAV client for sensitive operations until the issue is resolved.

Exploit

Fix

LPE

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2016-00432

CVE-2016-0051

Affected Products

Webdav Client

Windows

Windows 10

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008

Windows Server 2012

Windows Vista

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms16_016_webdav.rb · Exploit
• 🔥 https://github.com/koczkatamas/CVE-2016-0051 · Exploit
• 🔥 https://github.com/hexx0r/CVE-2016-0051 · Exploit
• 🔥 https://exploit-db.com/exploits/40085 · Exploit
• 🔥 https://exploit-db.com/exploits/39788 · Exploit
• 🔥 https://exploit-db.com/exploits/39432 · Exploit
• https://osv.dev/vulnerability/CVE-2016-0051 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00432 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-0051 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-016 · Vendor Advisory
• https://t.me/aptreports/13731 · Telegram Post
• http://technet.microsoft.com/security/bulletin/MS16-016 · Note
• http://securitytracker.com/id/1034980 · Note