|
|
Family: Windows : Microsoft Bulletins --> Category: infos
Vulnerability in Plug and Play Could Allow Remote Code Execution and Local Elevation of Privilege (905749) Vulnerability Scan
Vulnerability Scan Summary
Acertains the presence of update 905749
Detailed Explanation for this Vulnerability Test
Synopsis :
A flaw in the Plug and Play service may allow an authenticated attacker
to execute arbitrary code on the remote host and therefore elevate his
rights.
Description :
The remote host contain a version of the Plug and Play service which
contains a vulnerability in the way it handles user-supplied data.
An authenticated attacker may exploit this flaw by sending a malformed
RPC request to the remote service and execute code within the SYSTEM
context.
Solution :
Microsoft has released a set of patches for Windows 2000 and XP :
http://www.microsoft.com/technet/security/bulletin/ms05-047.mspx
Threat Level:
Medium / CVSS Base Score : 6
(AV:R/AC:L/Au:R/C:C/A:C/I:C/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
