PT-2017-3023 · Microsoft · Windows

Published 2017-05-24 · Updated 2017-05-24

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description The issue is related to a flaw in the implementation of the NT LAN Manager (NTLM) network authentication protocol in the Windows operating system. This flaw can be exploited by a remote attacker to gain access to user password hashes using a specially crafted SCF file placed in a publicly accessible network resource.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-303

Related Identifiers

BDU:2017-02381

Affected Products

Windows

References · 6

• https://bdu.fstec.ru/vul/2017-02381 · Security Note
• http://sysadminjd.com/adv170014-ntlm-sso-exploitation-guide · Note
• https://xakep.ru/2017/10/30/scf-windows-bug · Note
• http://exploit.kitploit.com/2017/10/windows-ntlm-auth-hash-disclosure.html · Note
• https://securitylab.ru/news/489392.php · Note
• https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV170014 · Note