Microsoft Windows NT 4.0/2000 – Spoofed LPC Request (MS00-003)

Microsoft Windows NT 4.0/2000 – Spoofed LPC Request (MS00-003)

漏洞ID 1053464 漏洞类型
发布时间 2000-10-03 更新时间 2000-10-03
图片[1]-Microsoft Windows NT 4.0/2000 – Spoofed LPC Request (MS00-003)-安全小百科CVE编号 N/A
图片[2]-Microsoft Windows NT 4.0/2000 – Spoofed LPC Request (MS00-003)-安全小百科CNNVD-ID N/A
漏洞平台 Windows CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/20265
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/1753/info

This vulnerability is a new variation of the NT LPC Privilege Escalation Vulnerabilty (please see http://www.securityfocus.com/bid/934 for details) reported on January 12, 2000 by Bindview. The patch released by Microsoft (http://www.microsoft.com/technet/security/bulletin/ms00-003.asp) on January 12, 2000 does not address these new issues.

A number of restrictions apply to this new variation of the spoofed LPC replies vulnerability. Only presently running processes can be impersonated and the LPC identifier must be specified. As well, in order to successfully exploit this vulnerability, the request must be conducted at the same time as when the LPC call was made.

Successful exploitation could lead to privilege escalation on the local machine.

These vulnerabilities can only be launched against a machine a user can interactively log onto, therefore remote exploitation is not possible.

start porttool -s BaseNamedObjectsFoo
start porttool -c BaseNamedObjectsFoo
porttool -s3 BaseNamedObjectsFoo2
(enter PID, TID, MID from porttool -s ...) 

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/20265.zip

相关推荐: HP-UX SSH允许访问漏洞

HP-UX SSH允许访问漏洞 漏洞ID 1207298 漏洞类型 未知 发布时间 1998-09-01 更新时间 1998-09-01 CVE编号 CVE-1999-0310 CNNVD-ID CNNVD-199809-004 漏洞平台 N/A CVSS评分…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享