Description (CNA)
NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-008
- http://razor.bindview.com/publish/advisories/adv_NTLMSSP.html
- http://www.securityfocus.com/bid/2348
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6076
ADP enrichment
No English description supplied.