PT-2016-2178 · Microsoft · Windows Vista+7

Nabeel Ahmed + 1 · Published 2016-06-14 · Updated 2018-10-12 · CVE-2016-3223

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue is related to errors in LDAP authentication handling, which can be exploited by man-in-the-middle attackers to gain privileges. This is achieved by modifying group-policy update data within a domain-controller data stream. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include the manipulation of LDAP authentication, allowing attackers to elevate their privileges.

Recommendations For Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511, update to a version that includes the fix for the LDAP authentication handling issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2016-01531

CVE-2016-3223

Affected Products

Windows

Windows 10

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008

Windows Server 2012

Windows Vista

References · 10

• 🔥 https://exploit-db.com/exploits/40219 · Exploit
• https://osv.dev/vulnerability/CVE-2016-3223 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3223 · Security Note
• https://bdu.fstec.ru/vul/2016-01531 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3223 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-072 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2016-3223 · Vendor Advisory
• http://packetstormsecurity.com/files/138248/Microsoft-Windows-7-Group-Policy-Privilege-Escalation.html · Note
• http://technet.microsoft.com/security/bulletin/MS16-072 · Note
• http://securitytracker.com/id/1036100 · Note