CERTA-2002-AVI-178
Vulnerability from certfr_avis
Une vulnérabilité présente dans NCM (Network Connection Manager) permet à un utilisateur distant mal intentionné de réaliser une élévation de privilèges sur la machine cible.
Description
NCM est un composant de Windows 2000 qui permet de gérer les raccordements réseau vers des systèmes distants.
Une vulnérabilité dans la routine de reconnaissance d'une nouvelle connexion permet à un utilisateur distant mal intentionné de prendre le contrôle de la machine cible avec les privilèges LocalSystem.
Solution
Télécharger le correctif disponible sur le site Microsoft :
http://www.microsoft.com/downloads/Release.asp?ReleaseID=41406
Windows 2000.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eWindows 2000.\u003c/P\u003e",
"content": "## Description\n\nNCM est un composant de Windows 2000 qui permet de g\u00e9rer les\nraccordements r\u00e9seau vers des syst\u00e8mes distants.\n\nUne vuln\u00e9rabilit\u00e9 dans la routine de reconnaissance d\u0027une nouvelle\nconnexion permet \u00e0 un utilisateur distant mal intentionn\u00e9 de prendre le\ncontr\u00f4le de la machine cible avec les privil\u00e8ges LocalSystem.\n\n## Solution\n\nT\u00e9l\u00e9charger le correctif disponible sur le site Microsoft :\n\n http://www.microsoft.com/downloads/Release.asp?ReleaseID=41406\n",
"cves": [],
"initial_release_date": "2002-08-19T00:00:00",
"last_revision_date": "2002-08-19T00:00:00",
"links": [
{
"title": "Bulletin Microsoft :",
"url": "http://www.microsoft.com/technet/security/bulletin/MS02-042.asp"
}
],
"reference": "CERTA-2002-AVI-178",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2002-08-19T00:00:00.000000"
}
],
"risks": [
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 pr\u00e9sente dans NCM (Network Connection Manager) permet\n\u00e0 un utilisateur distant mal intentionn\u00e9 de r\u00e9aliser une \u00e9l\u00e9vation de\nprivil\u00e8ges sur la machine cible.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans le gestionnaire de connexions r\u00e9seau sous Windows 2000",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin Microsoft MS02-042",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…