Microsoft Windows Services Have Unsafe Default ACLs That Let Remote Authenticated Users Gain Elevated Privileges
|
|
SecurityTracker Alert ID: 1015765
|
|
SecurityTracker URL: http://securitytracker.com/id?1015765
|
|
CVE Reference: CVE-2006-0023
(Links to External Site)
|
Date: Mar 14 2006
|
Impact: Execution of arbitrary code via local system, Modification of system information, Root access via local system
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: Microsoft Security Bulletin
|
Version(s): 2003, XP SP1; and prior service packs
|
Description: A vulnerability was reported in Microsoft Windows. A local user or a remote authenticated user can gain elevated privileges.
The Windows XP SP1 and Windows 2003 operating systems do not properly set default access control list permissions for certain Windows
services.
On Windows XP SP1, a local or remote authenticated user can change the default binary that is associated with an affected
service. The user can then stop and restart the service to execute arbitrary code on the target system with System level privileges.
On
Windows 2003, a local or remote authenticated user that belongs to the network configuration operators group can modify properties
associated with the service. This group contains no users by default.
Microsoft credits Andres Tarasco of SIA Group with reporting
this vulnerability.
|
Impact: A local or remote authenticated user can gain System level privileges.
|
Solution: The vendor has issued the following fixes:
Microsoft Windows XP Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=004D4492-08A5-445E-B5CD-BCC9
162CC8F9
Microsoft Windows Server 2003:
http://www.microsoft.com/downloads/details.aspx?FamilyId=B8D2D18F-8D2A-495B-83FF-1696EC1E5EA1
Microsoft
Windows Server 2003 for Itanium-based Systems:
http://www.microsoft.com/downloads/details.aspx?FamilyId=B1AB9B42-80CD-4002-88FA-7A83AB15C2EE
A
restart is not required.
The vendor's advisory is available at:
http://www.microsoft.com/technet/security/Bulletin/MS06-011.mspx
|
Vendor URL: www.microsoft.com/technet/security/Bulletin/MS06-011.mspx (Links to External Site)
|
Cause: Access control error, Configuration error
|
Underlying OS: Windows (2003), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 14 Mar 2006 10:34:52 -0500
Subject: http://www.microsoft.com/technet/security/Bulletin/MS06-011.mspx
|
http://www.microsoft.com/technet/security/Bulletin/MS06-011.mspx
|
|
