Lucene search

K

[email protected]NVD:CVE-2010-2554

HistoryAug 11, 2010 - 6:47 p.m.

CVE-2010-2554

2010-08-1118:47:50

CWE-264

[email protected]

web.nvd.nist.gov

5

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

19.1%

The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka “Tracing Registry Key ACL Vulnerability.”

Affected configurations

Nvd

Node

microsoftwindows_7Match-

OR

microsoftwindows_server_2008itanium

OR

microsoftwindows_server_2008x32

OR

microsoftwindows_server_2008x64

OR

microsoftwindows_server_2008r2itanium

OR

microsoftwindows_server_2008r2x64

OR

microsoftwindows_server_2008sp2x32

OR

microsoftwindows_server_2008sp2x64

OR

microsoftwindows_server_2008Match-sp2itanium

OR

microsoftwindows_vistasp1

OR

microsoftwindows_vistasp2

OR

microsoftwindows_vistaMatch-sp1

OR

microsoftwindows_vistaMatch-sp2

References

docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-059

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12082

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

19.1%

Related for NVD:CVE-2010-2554

seebug2 prion1 cvelist1 cve1 canvas1 exploitpack1 exploitdb1 securityvulns2 openvas2 nessus1