Oval Definition:	oval:org.mitre.oval:def:155
Revision Date: 2011-05-09 Version: 44 Title: User Profile Elevation of Privilege Vulnerability Description: Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the UserProfile directory, aka "User Profile Elevation of Privilege Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2006-3443 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP Product(s): Definition Synopsis Win2K,SP4 Microsoft Windows 2000 SP4 or later is installed AND The version of Kernel32.dll is less than 5.0.2195.7099. OR WinXP,SP1 Microsoft Windows XP SP1 (32-bit) is installed AND The version of Kernel32.dll is less than 5.1.2600.1869. OR WinXP,SP2 Microsoft Windows XP SP2 or later is installed AND The version of Kernel32.dll is less than 5.1.2600.2945. OR WinXP,SP1 (64-bit) Microsoft Windows XP SP1 (64-bit) is installed AND The version of Kernel32.dll is less than 5.2.3790.2741. OR S03-Gold Microsoft Windows Server 2003 (x86) Gold is installed AND The version of Kernel32.dll is less than 5.2.3790.556. OR S03,SP1 Microsoft Windows Server 2003 SP1 (x86) is installed AND The version of Kernel32.dll is less than 5.2.3790.2741.
BACK