4.6

CVE-2004-2730

Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Psexec Version <= 1.53
Microsoft ≫ Psgetsid Version <= 1.40
Microsoft ≫ Psinfo Version <= 1.60
Microsoft ≫ Pskill Version <= 1.02
Microsoft ≫ Pslist Version <= 1.25
Microsoft ≫ Psloglist Version <= 2.50
Microsoft ≫ Pspasswd Version <= 1.20
Microsoft ≫ Psservice Version <= 2.11
Microsoft ≫ Psshutdown Version <= 2.31
Microsoft ≫ Pssuspend Version <= 1.04
Microsoft ≫ Sysinternals Pstools Version <= 2.04
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.92% 0.738
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P