Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 do not properly establish an RPC channel, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "Windows SAM and LSAD Downgrade Vulnerability" or "BADLOCK."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows RPC 特权提升漏洞
Vulnerability Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。SAM和LSAD是其中的安全帐户管理器（SAM）和本地安全机构（LSAD）远程协议。 Microsoft Windows中的SAM和LSAD远程协议中存在特权提升漏洞，该漏洞源于程序接受未充分保护的RPC通道的验证级别。攻击者可利用该漏洞获得对SAM数据库的访问权限。以下版本受到影响：Microsoft Windows Vista SP2，Windows Server 2008 SP2和R2 SP1，Windows
CVSS Information
N/A
Vulnerability Type
N/A