Lucene search
MicrosoftCVE-2010-2554HistoryAug 11, 2010 - 6:47 p.m.
CVE-2010-2554
2010-08-1118:47:50
CWE-264
microsoft
web.nvd.nist.gov
48
cve-2010-2554
tracing feature
microsoft windows
acl vulnerability
security
nvd
CVSS2
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
19.1%
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka โTracing Registry Key ACL Vulnerability.โ
Affected configurations
Node
microsoftwindows_7Match-
ORmicrosoftwindows_server_2008itanium
ORmicrosoftwindows_server_2008x32
ORmicrosoftwindows_server_2008x64
ORmicrosoftwindows_server_2008r2itanium
ORmicrosoftwindows_server_2008r2x64
ORmicrosoftwindows_server_2008sp2x32
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008Match-sp2itanium
ORmicrosoftwindows_vistasp1
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_vistaMatch-sp1
ORmicrosoftwindows_vistaMatch-sp2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_server_2008 | cpe:/o:microsoft:windows_server_2008::sp2:: | |
| microsoft | windows_vista | - | cpe:/o:microsoft:windows_vista:-:sp2:: |
| microsoft | windows_vista | cpe:/o:microsoft:windows_vista::sp2:: | |
| microsoft | windows_server_2008 | - | cpe:/o:microsoft:windows_server_2008:-:sp2:: |
| microsoft | windows_vista | - | cpe:/o:microsoft:windows_vista:-:sp1:: |
| microsoft | windows_7 | - | cpe:/o:microsoft:windows_7:-::: |
| microsoft | windows_server_2008 | cpe:/o:microsoft:windows_server_2008:::: | |
| microsoft | windows_server_2008 | cpe:/o:microsoft:windows_server_2008::r2:: | |
| microsoft | windows_vista | cpe:/o:microsoft:windows_vista::sp1:: |
Related
seebug
seebug
prion
prion
Security feature bypass
2010-08-11 18:47:00
canvas
canvas
Immunity Canvas: MS10_059
2010-08-11 18:47:00
exploitpack
exploitpack
Microsoft Windows - Tracing Registry Key ACL Privilege Escalation
2010-08-10 00:00:00
cvelist
cvelist
CVE-2010-2554
2010-08-11 18:00:00
nvd
nvd
CVE-2010-2554
2010-08-11 18:47:50
exploitdb
exploitdb
Microsoft Windows - Tracing Registry Key ACL Privilege Escalation
2010-08-10 00:00:00
securityvulns
securityvulns
openvas
openvas
nessus
nessus
CVSS2
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
19.1%
Related for CVE-2010-2554