Oval Definition:	oval:org.mitre.oval:def:6177
Revision Date: 2014-03-17 Version: 47 Title: Windows Thread Pool ACL Weakness Vulnerability Description: The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by leveraging incorrect thread ACLs to access the resources of one of the processes, aka "Windows Thread Pool ACL Weakness Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-0080 Platform(s): Microsoft Windows Server 2008 Microsoft Windows Vista Product(s): Definition Synopsis Check for Windows Vista x64 /(32-bit) Windows Vista x64 /(32-bit) Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Check for LDR/GDR Check if version of rpcss.dll is less than 6.0.6000.16830 OR Check for LDR Check if version of rpcss.dll is less than 6.0.6000.21023 AND Check if version of rpcss.dll is greater than or equal to 6.0.6000.20000 OR Check for Windows Vista x64 SP1/32-bit/Server 2008 (ia-64)/(32-bit)/(x64) Windows Vista x64 SP1/32-bit/Server 2008 (ia-64)/(32-bit)/(x64) Microsoft Windows Vista (32-bit) Service Pack 1 is installed OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Check for LDR/GDR Check if version of rpcss.dll is less than 6.0.6001.18226 OR Check for LDR Check if version of rpcss.dll is greater than or equal to 6.0.6001.22000 AND Check if version of rpcss.dll is less than 6.0.6001.22389
BACK