Oval Definition:oval:org.mitre.oval:def:12082
Revision Date:2014-03-03Version:48
Title:Tracing Registry Key ACL Vulnerability
Description:The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-2554
Platform(s):Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Product(s):
Definition Synopsis
  • Vulnerable Microsoft Windows Vista SP1 x86/x64, Server 2008 32bit/x64/ia64
  • Microsoft Windows Vista (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND GDR or LDR Service branch
  • Rtutils.dll version is less than 6.0.6001.18495
  • OR LDR
  • Rtutils.dll version is greater than or equal 6.0.6001.22000
  • AND Rtutils.dll version is less than 6.0.6001.22715
  • OR Vulnerable Microsoft Windows Vista SP2 x86/x64, Server 2008 SP2 32bit/x64/ia64
  • Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed
  • AND GDR or LDR Service branch
  • Rtutils.dll version is less than 6.0.6002.18274
  • OR LDR
  • Rtutils.dll version is greater than or equal 6.0.6002.22000
  • AND Rtutils.dll version is less than 6.0.6002.22427
  • OR Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x86/x64/ia64
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND GDR or LDR Service branch
  • Rtutils.dll version is less than 6.1.7600.16617
  • OR LDR
  • Rtutils.dll version is greater than or equal 6.1.7600.20000
  • AND Rtutils.dll version is less than 6.1.7600.20738
  • BACK