NTLMSSP Privilege Elevation Vulnerability New

A security vulnerability exists in Microsoft® Windows NT 4.0 which could allow a locally logged on user to grant herself administrator level privileges.

Issue

A flaw in the NTLM Security Support Provider (NTLMSSP) service could potentially allow a non-administrative user to gain administrative control over the system. In order to perform this attack the user would need a valid login account and the ability to execute arbitrary code on the system.

Affected Products

• Windows NT 4.0

Download

Patch: http://www.microsoft.com/Downloads/Release.asp?ReleaseID=27804

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: February 16, 2001

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<