Published: 06/08/2004 Updated: 14/02/2024

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 740

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Subscribe to Windows 2000

Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows 2000 -

/****************************************************************************************** *****C*****O*****R*****O******M******P*****U*******T*******E******R*****2***0***0***4**** ** [Crpt] Utility Manager exploit v2666 modified by kralor [Crpt] ** ********************************** ...

/****************************************************************************************** ****C*****O*****R*****O******M******P*****U*******T*******E******R*****2***0***0***4***** ** [Crpt] Utility Manager exploit v1666 modified by kralor [Crpt] ** ********************************* ...

/* Microsoft Windows POSIX Subsystem Local Privilege Escalation Exploit (MS04-020) * * Tested on windows 2k sp4 CN,NT/XP/2003 NOT TESTED * * Posixexpc By bkbll (bkbll cnhonker net,bkbll tom com) www cnhonker com * * 2004/07/16 * * thanks to eyas xfocus org * * C:\>whoami VITUALWIN2K\test C:\>posixexp Microsoft Windows POSIX Subsystem Local ...

//by Cesar Cerrudo sqlsec at yahoocom //Local elevation of priviliges exploit for Windows 2K Utility Manager (second one!!!!) //Gives you a shell with system privileges //If you have problems try changing Sleep() values #include "stdioh" #include "windowsh" int main(int argc, char* argv[]) { HWND lHandle, lHandle2; POINT point; char sTex ...

CWE-306 http://www.us-cert.gov/cas/techalerts/TA04-196A.html http://www.kb.cert.org/vuls/id/868580 http://marc.info/?l=bugtraq&m=108975382413405&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/16592 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2495 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-019 https://nvd.nist.gov https://www.exploit-db.com/exploits/355/https://www.kb.cert.org/vuls/id/868580

CVE-2004-0213

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect