Description
Sysinternals PsTools utilities contain a vulnerability which allows a local attacker to gain privileged access on a remote host. Several PsTool utilities map the IPC$ or ADMIN$ share to execute a command on a remote host. However, the PsTool utilities do not disconnect from the IPC$ or ADMIN$ share when the program exits. An attacker can use the existing share mapping to take administrative actions on a remote machine. In order to exploit the issue, an affected PsTools utility must first be successfully run on a remote host by a legitimate user and the user must not reboot the host or logoff. This is a non-priority technology vulnerability.
Back to top