CVE-2004-2176 The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypa...
MediumCVSS 4.6
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows xp | All versions | No fix listed |
References
- 20041012 Writing Trojans that bypass Windows XP Service Pack 2 Firewall mailing-list
- 11410 exploit vdb-entry