CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
19.1%
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka โTracing Registry Key ACL Vulnerability.โ
Vendor | Product | Version | CPE |
---|---|---|---|
microsoft | windows_server_2008 | cpe:/o:microsoft:windows_server_2008::sp2:: | |
microsoft | windows_vista | - | cpe:/o:microsoft:windows_vista:-:sp2:: |
microsoft | windows_vista | cpe:/o:microsoft:windows_vista::sp2:: | |
microsoft | windows_server_2008 | - | cpe:/o:microsoft:windows_server_2008:-:sp2:: |
microsoft | windows_vista | - | cpe:/o:microsoft:windows_vista:-:sp1:: |
microsoft | windows_7 | - | cpe:/o:microsoft:windows_7:-::: |
microsoft | windows_server_2008 | cpe:/o:microsoft:windows_server_2008:::: | |
microsoft | windows_server_2008 | cpe:/o:microsoft:windows_server_2008::r2:: | |
microsoft | windows_vista | cpe:/o:microsoft:windows_vista::sp1:: |