CERTA-2002-AVI-178

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité présente dans NCM (Network Connection Manager) permet à un utilisateur distant mal intentionné de réaliser une élévation de privilèges sur la machine cible.

Description

NCM est un composant de Windows 2000 qui permet de gérer les raccordements réseau vers des systèmes distants.

Une vulnérabilité dans la routine de reconnaissance d'une nouvelle connexion permet à un utilisateur distant mal intentionné de prendre le contrôle de la machine cible avec les privilèges LocalSystem.

Solution

Télécharger le correctif disponible sur le site Microsoft :

http://www.microsoft.com/downloads/Release.asp?ReleaseID=41406

Windows 2000.

Impacted products
Vendor Product Description
References
Bulletin Microsoft MS02-042 None vendor-advisory
Bulletin Microsoft : - other

Show details on source website

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eWindows 2000.\u003c/P\u003e",
  "content": "## Description\n\nNCM est un composant de Windows 2000 qui permet de g\u00e9rer les\nraccordements r\u00e9seau vers des syst\u00e8mes distants.\n\nUne vuln\u00e9rabilit\u00e9 dans la routine de reconnaissance d\u0027une nouvelle\nconnexion permet \u00e0 un utilisateur distant mal intentionn\u00e9 de prendre le\ncontr\u00f4le de la machine cible avec les privil\u00e8ges LocalSystem.\n\n## Solution\n\nT\u00e9l\u00e9charger le correctif disponible sur le site Microsoft :\n\n    http://www.microsoft.com/downloads/Release.asp?ReleaseID=41406\n",
  "cves": [],
  "links": [
    {
      "title": "Bulletin Microsoft :",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS02-042.asp"
    }
  ],
  "reference": "CERTA-2002-AVI-178",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2002-08-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 pr\u00e9sente dans NCM (Network Connection Manager) permet\n\u00e0 un utilisateur distant mal intentionn\u00e9 de r\u00e9aliser une \u00e9l\u00e9vation de\nprivil\u00e8ges sur la machine cible.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans le gestionnaire de connexions r\u00e9seau sous Windows 2000",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin Microsoft MS02-042",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…