首页 -> 安全研究

安全研究

绿盟月刊
绿盟安全月刊->第55期->最新漏洞
期刊号: 类型: 关键词:
Microsoft Windows Kernel与Local Security Authority Service提升权限漏洞

日期:2005-01-06

发布日期:2004-12-14
更新日期:2004-12-15

受影响系统:
Microsoft Windows XP
Microsoft Windows NT 4.0SP6a
Microsoft Windows 2003
Microsoft Windows 2000SP4
Microsoft Windows 2000SP3
描述:
--------------------------------------------------------------------------------
BUGTRAQ  ID: 11914
CVE(CAN) ID: CAN-2004-0894

Microsoft Windows是一款视窗操作系统。

Microsoft Windows内核在启动应用程序时存在特权提升问题,本地攻击者可以利用这个漏洞控制整个系统。

目前没有详细漏洞细节提供。

<*来源:Cesar Cerrudo (cesarc56@yahoo.com)
  
  链接:http://www.microsoft.com/technet/security/bulletin/MS04-044.mspx
*>

建议:
--------------------------------------------------------------------------------
厂商补丁:

Microsoft
---------
Microsoft已经为此发布了一个安全公告(MS04-044)以及相应补丁:
MS04-044:Vulnerabilities in Windows Kernel and LSASS Could Allow Elevation of Privilege (885835)
链接:http://www.microsoft.com/technet/security/bulletin/MS04-044.mspx

补丁下载:

Microsoft Windows NT Server 4.0 Service Pack 6a

http://www.microsoft.com/downloads/details.aspx?FamilyId=325EAA8F-AF09-4839-B9E8-BB218C7A8564

Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6

http://www.microsoft.com/downloads/details.aspx?FamilyId=9823A61F-C69F-403A-BD6A-EF3984BFA2B8

Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4

http://www.microsoft.com/downloads/details.aspx?FamilyId=EFDEA122-DDA4-40B8-A7AF-9DDCC3870C38

Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2

http://www.microsoft.com/downloads/details.aspx?FamilyId=27115D5C-3E4A-4F41-B81E-376AA1CD204F

Microsoft Windows XP 64-Bit Edition Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyId=1649AE1E-0ABF-4D31-BE12-3982C5146AE8

Microsoft Windows XP 64-Bit Edition Version 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=95849AB9-36BF-4A90-BC37-3B4FB6DCDF9A

Microsoft Windows Server 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=AACB97CB-E8F0-461F-B2D2-F1065229B64E

Microsoft Windows Server 2003 64-Bit Edition

http://www.microsoft.com/downloads/details.aspx?FamilyId=95849AB9-36BF-4A90-BC37-3B4FB6DCDF9A

版权所有,未经许可,不得转载