NetSight
IP …
medium4.6

CVE-2004-2730

Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before…

Impact

Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.

Affected products

VendorProductAffected versions
MicrosoftPsexec
through 1.53
MicrosoftPsgetsid
through 1.40
MicrosoftPsinfo
through 1.60
MicrosoftPskill
through 1.02
MicrosoftPslist
through 1.25
MicrosoftPsloglist
through 2.50
MicrosoftPspasswd
through 1.20
MicrosoftPsservice
through 2.11
MicrosoftPsshutdown
through 2.31
MicrosoftPssuspend
through 1.04
MicrosoftSysinternals Pstools
through 2.04

Weakness classification

CWE-264

References