SB2018010405 - Privilege escalation in Microsoft Windows SMB Server
Published: January 4, 2018
Security Bulletin ID
SB2018010405
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Privilege escalation (CVE-ID: CVE-2018-0749)
The vulnerability allows a local user to escalate privileges on the system.The vulnerability exists due to an unspecified error in Windows SMB Server, which allows a local user to bypass certain security checks in the operating system while trying to obtain apecially crafted file over the SMB protocol on the same machine. Successful exploitation of the vulnerability may allow an attacker to escalate privileges on the affected system.
Remediation
Install update from vendor's website.