Microsoft Windows LSASS Lets Local Users Gain Elevated Privileges
|
|
SecurityTracker Alert ID: 1019165 |
|
SecurityTracker URL: http://securitytracker.com/id/1019165
|
|
CVE Reference:
CVE-2007-5352
(Links to External Site)
|
Date: Jan 8 2008
|
Impact:
Execution of arbitrary code via local system, Root access via local system
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 2000 SP4, 2003 SP2, XP SP2; and prior service packs
|
Description:
A vulnerability was reported in Microsoft Windows in the Local Security Authority Subsystem Service (LSASS). A local user can obtain elevated privileges on the target system.
The LSASS service does not properly handle local procedure call (LPC) requests. A local user can send a specially crafted LPC request to execute arbitrary code on the target system with system level privileges.
Windows Vista is not affected.
Thomas Garnier of SkyRecon reported this vulnerability.
|
Impact:
A local user can obtain system privileges on the target system.
|
Solution:
The vendor has issued the following fixes:
Microsoft Windows 2000 Service Pack 4:
http://www.microsoft.com/downloads/details.aspx?FamilyId=7956632e-17d9-4876-8340-84fe3e43e5cc
Windows XP Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?FamilyId=6a4cf182-8e36-490e-aefe-edb7b3a0df9c
Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?FamilyID=51fc657b-2b4a-4725-a744-d279e027c4a5
Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?FamilyID=12397b47-b18f-4d4d-b8d7-adec8ff310d5
Windows Server 2003 x64 Edition and Windows 2003 Server x64 Edition Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?FamilyID=f19fd790-a4e6-4a8a-8077-d1bbfe37ecca
Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium based Systems:
http://www.microsoft.com/downloads/details.aspx?FamilyID=0382a195-aa3d-409b-8a79-9fe61588d8a9
A restart is required.
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms08-002.mspx
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms08-002.mspx (Links to External Site)
|
Cause:
Input validation error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 8 Jan 2008 13:17:26 -0500
Subject: Microsoft Security Bulletin MS08-002 Important: Vulnerability in LSASS Could Allow Local Elevation of Privilege (943485)
|
http://www.microsoft.com/technet/security/bulletin/ms08-002.mspx
CVE-2007-5352
|
|
