CVE-2004-2730 Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsP...
MediumCVSS 4.6
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft psexec | <= 1.53 | No fix listed |
| Microsoft psgetsid | <= 1.40 | No fix listed |
| Microsoft psinfo | <= 1.60 | No fix listed |
| Microsoft pskill | <= 1.02 | No fix listed |
| Microsoft pslist | <= 1.25 | No fix listed |
| Microsoft psloglist | <= 2.50 | No fix listed |
| Microsoft pspasswd | <= 1.20 | No fix listed |
| Microsoft psservice | <= 2.11 | No fix listed |
| Microsoft psshutdown | <= 2.31 | No fix listed |
| Microsoft pssuspend | <= 1.04 | No fix listed |
| Microsoft sysinternals pstools | <= 2.04 | No fix listed |
References
- 12108 third-party-advisory vendor-advisory
- 1010737 vdb-entry
- 8140 vdb-entry
- 10759 patch vdb-entry
- www3.ca.com
- pstools-gain-admin-access(16743) vdb-entry