ID:556 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2009-0080

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Exploits ID:556 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2009-0080

ID:556 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2009-0080

Published: March 18, 2020


Vulnerability identifier: #VU1319
Vulnerability risk: Medium
CVE-ID: CVE-2009-0080
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to incorrect placing of access control lists (ACLs) on threads in the current ThreadPool. By leveraging incorrect thread ACLs an attacker can access NetworkService or LocalService account, obtain elevated privileges and execute code with privileges of SYSTEM account.

Successful exploitation of the vulnerability results in privilege escalation allowing to execute arbitrary code and take complete control of an affected system.

Note: this vulnerability was being actively exploited.

Remediation