CVE-2007-3036

2007-09-1201:17:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2007-3036

windows services

unix

subsystem

microsoft windows

vulnerability

privilege escalation

6.3 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to “certain setuid binary files.”

CPENameOperatorVersion
microsoft:windows_services_for_unixmicrosoft windows services for unixeq3.5
microsoft:windows_services_for_unixmicrosoft windows services for unixeq3.0
microsoft:windows_2003_servermicrosoft windows 2003 servereq*
microsoft:windows_vistamicrosoft windows vistaeq*

CPE	Name	Operator	Version
microsoft:windows_services_for_unix	microsoft windows services for unix	eq	3.5
microsoft:windows_services_for_unix	microsoft windows services for unix	eq	3.0
microsoft:windows_2003_server	microsoft windows 2003 server	eq	*
microsoft:windows_vista	microsoft windows vista	eq	*