PT-2020-1912 · Microsoft · Windows Background Intelligent Transfer Service+1

Published 2020-03-10 · Updated 2025-12-20 · CVE-2020-0787

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Background Intelligent Transfer Service (BITS) versions prior to the fixed version

Description The issue is related to errors in handling symbolic links that display paths to files and directories. This can allow an attacker to elevate their privileges using a specially crafted application. The vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles these links.

Recommendations For Windows Background Intelligent Transfer Service (BITS) versions prior to the fixed version, consider disabling the service until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Link Following

Improper Privilege Management

Weakness Enumeration

CWE-59

CWE-269

CWE-264

Related Identifiers

BDU:2020-01189

CVE-2020-0787

Affected Products

Windows

Windows Background Intelligent Transfer Service

References · 37

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2020_0787_bits_arbitrary_file_move.rb · Exploit
• 🔥 https://github.com/cbwang505/CVE-2020-0787-EXP-ALL-WINDOWS-VERSION · Exploit
• 🔥 https://github.com/yanghaoi/CVE-2020-0787 · Exploit
• 🔥 http://packetstormsecurity.com/files/158056/Background-Intelligent-Transfer-Service-Privilege-Escalation.html · Exploit
• 🔥 https://packetstormsecurity.com/files/158056/Background-Intelligent-Transfer-Service-Privilege-Escalation.html · Exploit
• 🔥 https://itm4n.github.io/cve-2020-0787-windows-bits-eop · Exploit
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0787 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0787 · Security Note
• https://bdu.fstec.ru/vul/2020-01189 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-0787 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-0787 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0787 · Security Note
• https://github.com/Cr4sh/MicroBackdoor · Note
• https://github.com/IkerSaint/KingHamlet · Note
• https://t.me/aptreports/5225 · Telegram Post