Oval Definition:oval:org.mitre.oval:def:12912
Revision Date:2011-09-26Version:22
Title:NDISTAPI Elevation of Privilege Vulnerability
Description:NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2011-1974
Platform(s):Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):
Definition Synopsis
  • Vulnerable Windows XP x86 SP3
  • Microsoft Windows XP (x86) SP3 is installed
  • AND the version of Ndistapi.sys is less than 5.1.2600.6132
  • OR Vulnerable Windows XP x64 SP2, Windows Server 2003 x86/x64/ia64 SP2
  • Vulnerable Windows XP x64 SP2, Windows Server 2003 x86/x64/ia64 SP2
  • Microsoft Windows XP x64 Edition SP2 is installed
  • OR Microsoft Windows Server 2003 SP2 (x86) is installed
  • OR Microsoft Windows Server 2003 SP2 (x64) is installed
  • OR Microsoft Windows Server 2003 (ia64) SP2 is installed
  • AND the version of Ndistapi.sys is less than 5.2.3790.4885
    • BACK