medium4.6Public exploit code
CVE-2004-2176
The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows XP - Weak Default Configuration2004-10-13 · local · windows · Verified
Impact
The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Xp | All versions |