CVE-2004-2176 in Windows

الملخص

بحسب MITRE

the internet connection firewall (icf) in microsoft windows xp sp2 is configured by default to trust sessmgr.exe which allows local users to use sessmgr.exe to create a local listening port that bypasses the icf access controls.

Once again VulDB remains the best source for vulnerability data.

• حجز: 11/07/2005
• إفشاء: 31/12/2004
• الاعتدال: تمت الموافقة
• إدخال: VDB-23088
• CPE: جاهز
• CWE: CWE-284 (غير مؤكد)
• استغلال: تحميل
• CVSS: 4.6 (NVD)
• EPSS: 0.02848
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Finance, Education, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-2176
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-2176
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-2176/