Lucene search

[email protected]CVE-2004-2730

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2730

2004-12-3105:00:00

CWE-264

[email protected]

web.nvd.nist.gov

sysinternals

pstools

remote shares

ipc

admin

privilege escalation

vulnerability

6.7 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

15.6%

JSON

Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.

CPENameOperatorVersion
microsoft:psshutdownmicrosoft psshutdownle2.31
microsoft:psservicemicrosoft psservicele2.11
microsoft:psgetsidmicrosoft psgetsidle1.40
microsoft:pspasswdmicrosoft pspasswdle1.20
microsoft:psinfomicrosoft psinfole1.60
microsoft:pskillmicrosoft pskillle1.02
microsoft:sysinternals_pstoolsmicrosoft sysinternals pstoolsle2.04
microsoft:psloglistmicrosoft psloglistle2.50
microsoft:psexecmicrosoft psexecle1.53
microsoft:pssuspendmicrosoft pssuspendle1.04

CPE	Name	Operator	Version
microsoft:psshutdown	microsoft psshutdown	le	2.31
microsoft:psservice	microsoft psservice	le	2.11
microsoft:psgetsid	microsoft psgetsid	le	1.40
microsoft:pspasswd	microsoft pspasswd	le	1.20
microsoft:psinfo	microsoft psinfo	le	1.60
microsoft:pskill	microsoft pskill	le	1.02
microsoft:sysinternals_pstools	microsoft sysinternals pstools	le	2.04
microsoft:psloglist	microsoft psloglist	le	2.50
microsoft:psexec	microsoft psexec	le	1.53
microsoft:pssuspend	microsoft pssuspend	le	1.04

Rows per page:

1-10 of 111

References

secunia.com/advisories/12108

securitytracker.com/id?1010737

www.osvdb.org/8140

www.securityfocus.com/bid/10759

www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304

exchange.xforce.ibmcloud.com/vulnerabilities/16743

6.7 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

15.6%

JSON

Related for CVE-2004-2730

kaspersky1