Re: [EEYEB-20050523] Windows Kernel APC Data-FreeLocal Privilege Escalation Vulnerability

"Dave Korn" <[email protected]> Tue, 13 Dec 2005 20:00:57 -0000

Newsgroups	gmane.comp.security.full-disclosure,gmane.comp.security.ntbugtraq,gmane.comp.security.bugtraq
Message-ID	<[email protected]>

Joshua Russel wrote in 
news:[email protected]
> It is a local vulnerability, then how does Retina claims to scan it
> remotely?

  Well, at a guess....

> On 12/13/05, Advisories <[email protected]> wrote:

>> Systems Affected:
>> Windows NT 4.0
>> Windows 2000

>> Beginning with Windows XP, KeFlushQueueApc contains a code fix that
>> resolves this vulnerability.

... it just looks to see if the O/S is XP/2K3 or NT/2K.

    cheers,
      DaveK
-- 
Can't think of a witty .sigline today.... 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/