Lucene search
Symantec Security ResponseSMNTC-63971HistoryNov 27, 2013 - 12:00 a.m.
Microsoft Windows Kernel 'NDProxy.sys' Local Privilege Escalation Vulnerability
2013-11-2700:00:00
Symantec Security Response
www.symantec.com
18
0.001 Low
EPSS
Percentile
21.9%
Description
Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected computers.
Technologies Affected
- Avaya CallPilot 4.0
- Avaya CallPilot 4.0.1
- Avaya CallPilot 5.0
- Avaya CallPilot 5.0.1
- Avaya Communication Server 1000 Telephony Manager 3.0
- Avaya Communication Server 1000 Telephony Manager 3.0.1
- Avaya Communication Server 1000 Telephony Manager 4.0
- Avaya Communication Server 1000 Telephony Manager 4.0.1
- Avaya Messaging Application Server 4
- Avaya Messaging Application Server 5
- Avaya Messaging Application Server 5.0
- Avaya Messaging Application Server 5.0.1
- Avaya Messaging Application Server 5.2
- Avaya Messaging Application Server 5.2.1
- Avaya Messaging Application Server MM 1.1
- Avaya Messaging Application Server MM 2.0
- Avaya Messaging Application Server MM 3.0
- Avaya Messaging Application Server MM 3.1
- Microsoft Windows Server 2003 Itanium SP2
- Microsoft Windows Server 2003 SP2
- Microsoft Windows Server 2003 x64 SP2
- Microsoft Windows XP Professional x64 Edition SP2
- Microsoft Windows XP Service Pack 3
Recommendations
Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
To exploit this vulnerability, an attacker requires local access to an affected computer. Grant local access for trusted and accountable users only.
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Related
checkpoint_advisories
checkpoint_advisories
Microsoft Windows NDProxy.sys Elevation of Privilege (CVE-2013-5065)
2013-11-28 00:00:00
packetstorm
packetstorm
MS14-002 Windows NDProxy Privilege Escalation
2015-08-07 00:00:00
Microsoft Windows NDPROXY Local SYSTEM Privilege Escalation
2013-12-05 00:00:00
Microsoft Windows ndproxy.sys Local Privilege Escalation
2013-12-17 00:00:00
nessus
nessus
exploitpack
exploitpack
Microsoft Windows - NDPROXY SYSTEM Privilege Escalation (MS14-002)
2013-12-03 00:00:00
Windows-NDPROXY-SYSTEM
2015-01-05 14:23:52
thn
thn
seebug
seebug
Windows NDPROXY - 本地权限提升漏洞(MS14-002)
2014-07-01 00:00:00
Microsoft Windows ndproxy.sys - Local Privilege Escalation
2014-07-01 00:00:00
attackerkb
attackerkb
CVE-2013-5065 Microsoft NDProxy.sys Privilege Escalation
2013-11-28 00:00:00
CVE-2013-5065
2019-10-30 00:00:00
openvas
openvas
Microsoft Windows Kernel Privilege Escalation Vulnerability (2914368)
2013-12-02 00:00:00
Microsoft Windows Kernel Privilege Escalation Vulnerability (2914368)
2013-12-02 00:00:00
prion
prion
Code injection
2013-11-28 00:55:00
canvas
canvas
Immunity Canvas: NDPROXY
2013-11-28 00:55:00
zdt
zdt
NDPROXY Local SYSTEM Privilege Escalation
2013-12-04 00:00:00
Windows NDProxy Privilege Escalation XP SP3 x86 and 2003 SP2 x86 (MS14-002) Exploit
2015-08-09 00:00:00
Microsoft Windows ndproxy.sys Local Privilege Escalation
2013-12-17 00:00:00
cve
cve
CVE-2013-5065
2013-11-28 00:55:00
metasploit
metasploit
MS14-002 Microsoft Windows ndproxy.sys Local Privilege Escalation
2013-12-11 14:52:35
cisa_kev
cisa_kev
Microsoft Windows Kernel Privilege Escalation Vulnerability
2022-03-03 00:00:00
exploitdb
exploitdb
threatpost
threatpost
Epic Operation Kicks Off Multistage Turla APT Campaign
2014-08-07 10:00:03
securityvulns
securityvulns
Microsoft Windows security vulnerabilities
2014-01-15 00:00:00
fireeye
fireeye
CARBANAK Week Part Two: Continuing the CARBANAK Source Code Analysis
2019-04-23 17:45:00
kaspersky
kaspersky
KLA10601 Multiple vulnerabilities in Microsoft products
2014-11-11 00:00:00