CVE-2007-3036

CVE-2007-3036 describes a local privilege-escalation vulnerability in Windows Services for UNIX (WSF) 3.0 and 3.5 and in the Subsystem for UNIX-based Applications on Windows 2000/XP/Server 2003/Vista. The underlying issue is improper handling of setuid binary files which may allow a local, authen...

Microsoft Windows Services for UNIX本地权限提升漏洞（MS07-053）

BUGTRAQ ID: 25620 CVECAN ID: CVE-2007-3036 Microsoft Windows是微软发布的非常流行的操作系统。 Windows操作系统所安装的Windows Services for UNIX和基于UNIX的应用程序子系统组件没有正确的处理setuid二进制程序，本地攻击者可以登录到系统并运行特制的setuid二进制程序获得权限提升。 Microsoft Windows Services for UNIX 3.0 - Microsoft Windows XP SP2 - Microsoft Windows Server 2003 SP2 -...

Microsoft Windows Services for UNIX privilege escalation vulnerability

Overview Microsoft Windows Services for UNIX contains a vulnerability that may allow a local, authenticated attacker to gain elevated privileges. Description Windows Services for UNIX fails to properly handle setuid binary files. An attacker may be able to trigger this vulnerability by running a...

MS07-053: Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778)

The remote host is running a version of the Windows Services for UNIX that is vulnerable to a local privileges elevation due to a flaw in different setuid binary files. An attacker may use this to elevate his privileges on this host. Tenable Network Security, Inc. include"compat.inc"; if...