Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the (1) Simple Service Discovery Protocol (SSDP), (2) Universal Plug and Play Device Host (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP, and (6) DnsCache services, aka "Permissive Windows Services DACLs." NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows服务宽松DACL导致权限提升漏洞
Vulnerability Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Windows XP Service Pack 1对一些Windows服务的访问权限设置存在漏洞，本地攻击者可能利用此漏洞在主机上提升自己的权限。 默认下Windows XP Service Pack 1上的一些Windows服务(SSDPSRV、NetBT、UPnPHost、ScardSvr、DHCP和DnsCache)所设置的权限级别可能允许低特权用户更改与该服务关联的属性；Windows 2003上的一些服
CVSS Information
N/A
Vulnerability Type
N/A