Vulnerability Name:

CVE-2007-3036 (CCN-36378)

Assigned:2007-09-11
Published:2007-09-11
Updated:2018-10-12
Summary:Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."
CVSS v3 Severity:9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:6.9 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C)
5.1 Medium (Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
6.9 Medium (CCN CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C)
5.1 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-264
Vulnerability Consequences:Gain Privileges
References:Source: MITRE
Type: CNA
CVE-2007-3036

Source: CCN
Type: HP Security Bulletin HPSBST02260 SSRT071471
Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-051 to MS07-054

Source: CCN
Type: SA26757
Microsoft Windows Services for UNIX Privilege Escalation

Source: SECUNIA
Type: Vendor Advisory
26757

Source: CCN
Type: SECTRACK ID: 1018678
Windows Services for UNIX Lets Local Users Gain Elevated Privileges

Source: SECTRACK
Type: UNKNOWN
1018678

Source: CCN
Type: ASA-2007-379
MS07-053 Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778)

Source: CCN
Type: US-CERT VU#768440
Microsoft Windows Services for UNIX privilege escalation vulnerability

Source: CERT-VN
Type: US Government Resource
VU#768440

Source: CCN
Type: Microsoft Security Bulletin MS07-053
Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778)

Source: OSVDB
Type: UNKNOWN
36935

Source: CCN
Type: OSVDB ID: 36935
Microsoft Windows Services for UNIX Local Privilege Escalation

Source: BID
Type: UNKNOWN
25620

Source: CCN
Type: BID-25620
Microsoft Windows Services for UNIX Local Privilege Escalation Vulnerability

Source: CERT
Type: US Government Resource
TA07-254A

Source: VUPEN
Type: UNKNOWN
ADV-2007-3115

Source: MS
Type: UNKNOWN
MS07-053

Source: XF
Type: UNKNOWN
win-unix-setuid-privilege-escalation(36378)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:1275

Vulnerable Configuration:Configuration 1:
  • cpe:/o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
  • AND
  • cpe:/a:microsoft:windows_services_for_unix:3.5:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
  • AND
  • cpe:/a:microsoft:windows_services_for_unix:3.0:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:microsoft:windows_2003_server:*:gold:x64:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_vista:*:gold:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:microsoft:windows_services_for_unix:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:windows_services_for_unix:3.5:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:subsystem_for_unix-based_applications:*:*:*:*:*:*:*:*
  • AND
  • cpe:/o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:2003_server::x64:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:xp:sp2:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:2003_server:sp1:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_vista:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:server_2003:sp2:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:server_2003:sp2:x64:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_vista:-:*:x64:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:1275
    V
    		Windows Services for UNIX Could Allow Elevation of Privilege
    2007-10-18
    BACK
    microsoft windows 2000 * sp4
    microsoft windows 2003 server * sp1
    microsoft windows 2003 server * sp2
    microsoft windows xp * sp2
    microsoft windows services for unix 3.5
    microsoft windows 2000 * sp4
    microsoft windows 2003 server * sp1
    microsoft windows 2003 server * sp2
    microsoft windows xp * sp2
    microsoft windows services for unix 3.0
    microsoft windows 2003 server * gold
    microsoft windows 2003 server * sp1
    microsoft windows 2003 server * sp2
    microsoft windows 2003 server * sp2
    microsoft windows vista * gold
    microsoft windows vista * gold
    microsoft windows services for unix 3.0
    microsoft windows services for unix 3.5
    microsoft subsystem for unix-based applications *
    microsoft windows 2000 - sp4
    microsoft windows 2003_server
    microsoft windows xp sp2
    microsoft windows 2003_server sp1
    microsoft windows vista *
    microsoft windows server_2003 sp2
    microsoft windows server_2003 sp2
    microsoft windows vista -