Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name MS04-019 First vendor Publication N/A
Vendor Microsoft Last vendor Modification N/A
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 7.2 Attack Range Local
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability in Utility Manager Could Allow Code Execution (842526)

CAPEC : Common Attack Pattern Enumeration & Classification

Id Name
CAPEC-12 Choosing a Message/Channel Identifier on a Public/Multicast Channel
CAPEC-36 Using Unpublished Web Service APIs
CAPEC-40 Manipulating Writeable Terminal Devices
CAPEC-56 Removing/short-circuiting 'guard logic'
CAPEC-62 Cross Site Request Forgery (aka Session Riding)
CAPEC-69 Target Programs with Elevated Privileges
CAPEC-225 Exploitation of Authentication

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-306 Missing Authentication for Critical Function (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:2495
 
Oval ID: oval:org.mitre.oval:def:2495
Title: Windows Utility Manager Shatter Message Vulnerability II
Description: Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908.
Family: windows Class: vulnerability
Reference(s): CVE-2004-0213
Version: 2
Platform(s): Microsoft Windows 2000
Product(s): Utility Manager
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Os 3

ExploitDB Exploits

id Description
2008-05-15 Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

Open Source Vulnerability Database (OSVDB)

Id Description
7792 Microsoft Windows 2000 Utility Manager Privilege Escalation

Nessus® Vulnerability Scanner

Date Description
2004-07-13 Name : Local users can elevate their privileges.
File : smb_nt_ms04-019.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
Date Informations
2014-02-17 11:45:00
  • Multiple Updates