Microsoft Windows Services Have Unsafe Default ACLs That Let Remote Authenticated Users Gain Elevated Privileges
|
|
SecurityTracker Alert ID: 1015765 |
|
SecurityTracker URL: http://securitytracker.com/id/1015765
|
|
CVE Reference:
CVE-2006-0023
(Links to External Site)
|
Date: Mar 14 2006
|
Impact:
Execution of arbitrary code via local system, Modification of system information, Root access via local system
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 2003, XP SP1; and prior service packs
|
Description:
A vulnerability was reported in Microsoft Windows. A local user or a remote authenticated user can gain elevated privileges.
The Windows XP SP1 and Windows 2003 operating systems do not properly set default access control list permissions for certain Windows services.
On Windows XP SP1, a local or remote authenticated user can change the default binary that is associated with an affected service. The user can then stop and restart the service to execute arbitrary code on the target system with System level privileges.
On Windows 2003, a local or remote authenticated user that belongs to the network configuration operators group can modify properties associated with the service. This group contains no users by default.
Microsoft credits Andres Tarasco of SIA Group with reporting this vulnerability.
|
Impact:
A local or remote authenticated user can gain System level privileges.
|
Solution:
The vendor has issued the following fixes:
Microsoft Windows XP Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=004D4492-08A5-445E-B5CD-BCC9162CC8F9
Microsoft Windows Server 2003:
http://www.microsoft.com/downloads/details.aspx?FamilyId=B8D2D18F-8D2A-495B-83FF-1696EC1E5EA1
Microsoft Windows Server 2003 for Itanium-based Systems:
http://www.microsoft.com/downloads/details.aspx?FamilyId=B1AB9B42-80CD-4002-88FA-7A83AB15C2EE
A restart is not required.
The vendor's advisory is available at:
http://www.microsoft.com/technet/security/Bulletin/MS06-011.mspx
|
Vendor URL: www.microsoft.com/technet/security/Bulletin/MS06-011.mspx (Links to External Site)
|
Cause:
Access control error, Configuration error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 14 Mar 2006 10:34:52 -0500
Subject: http://www.microsoft.com/technet/security/Bulletin/MS06-011.mspx
|
http://www.microsoft.com/technet/security/Bulletin/MS06-011.mspx
|
|
