CVE-2004-2730

EPSS 1.5%

Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/12108 http://securitytracker.com/id?1010737 https://exchange.xforce.ibmcloud.com/vulnerabilities/16743 http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304 http://www.osvdb.org/8140 http://www.securityfocus.com/bid/10759