MS10-099: Vulnerability in Routing and Remote Access Could Allow Elevation of Privilege (2440591)

NASLDB: MS10-099: Vulnerability in Routing and Remote Access Could Allow Elevation of Privilege (2440591)

General

ID: 51171
Name: MS10-099: Vulnerability in Routing and Remote Access Could Allow Elevation of Privilege (2440591)

Summary: Checks the version of Ndproxy.sys

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Port: 139
Family: Windows : Microsoft Bulletins
Type: Local

Description

The Routing and Remote Access NDProxy component of the remote Windows
host does not properly validate user supplied input when passing data
from user mode to the kernel.

An attacker who can log on locally to the affected system can exploit
this to run arbitrary code in kernel mode.

Exploiting

Exploit Available: False
Exploitability Ease: No known exploits are available

Sources

CVE: CVE-2010-3963
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2010/12/14
Patch Release: 2010/12/14
Plugin Release: 2010/12/15

Plugin

Version: 1.14
Filename: smb_nt_ms10-099.nasl
Filesize: 3686 bytes
MD5 Hash: a86112b59485195e0f4447f047ae93fc

Identification: Host/patch_management_checks
Require Keys: SMB/MS_Bulletin_Checks/Possible
Dependencies: "smb_hotfixes.nasl", "ms_bulletin_checks_possible.nasl"