Microsoft Windows 2000 ntsystemdebugcontrol memory corruption ⚔ [Disputed]

Summaryinfo

A vulnerability categorized as problematic has been discovered in Microsoft Windows 2000. This affects the function ntsystemdebugcontrol. Such manipulation leads to memory corruption. This vulnerability is traded as CVE-2004-2339. An attack has to be approached locally. There is no exploit available. The actual existence of this vulnerability is currently in question. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Microsoft Windows 2000 (Operating System) and classified as critical. Affected by this issue is the function ntsystemdebugcontrol. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

** DISPUTED ** Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed.

The issue has been introduced in 02/17/2000. The weakness was shared 12/31/2004 (Website). The advisory is available at archives.neohapsis.com. This vulnerability is handled as CVE-2004-2339. The exploitation is known to be easy. Local access is required to approach this attack. The successful exploitation needs a simple authentication. Technical details are known, but there is no available exploit.

The vulnerability was handled as a non-public zero-day exploit for at least 1779 days. During that time the estimated underground price was around $25k-$100k. The real existence of this vulnerability is still doubted at the moment.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the databases at X-Force (15263) and SecurityTracker (ID 1009128†). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Operating System

Vendor

• Microsoft

Name

• Windows

Version

• 2000

License

• commercial

Website

• Vendor: https://www.microsoft.com/
• Product: https://www.microsoft.com/en-us/windows

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion