| Vulnerability Name: | CVE-2011-0030 (CCN-64917) | ||||||||
| Assigned: | 2010-12-10 | ||||||||
| Published: | 2011-02-08 | ||||||||
| Updated: | 2018-10-12 | ||||||||
| Summary: | The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023. | ||||||||
| CVSS v3 Severity: | 9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 4.7 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:N/A:N) 3.5 Low (Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:N/A:N/E:U/RL:OF/RC:C)
5.1 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-264 | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: MITRE Type: CNA CVE-2011-0030 Source: OSVDB Type: UNKNOWN 70826 Source: CCN Type: SA43250 Microsoft Windows CSRSS Logoff Process Termination Vulnerability Source: SECUNIA Type: Vendor Advisory 43250 Source: CCN Type: Microsoft Security Bulletin MS11-097 Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2620712) Source: CCN Type: Microsoft Security Bulletin MS11-010 Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2476687) Source: CCN Type: Microsoft Security Bulletin MS11-056 Vulnerabilities in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2507938) Source: CCN Type: OSVDB ID: 70826 Microsoft Windows CSRSS Logoff Process Termination Local Information Disclosure Source: CCN Type: BID-46142 Microsoft Windows CSRSS (CVE-2011-0030) Local Privilege Escalation Vulnerability Source: SECTRACK Type: UNKNOWN 1025045 Source: VUPEN Type: UNKNOWN ADV-2011-0323 Source: MS Type: UNKNOWN MS11-010 Source: XF Type: UNKNOWN ms-csrss-privilege-escalation(64917) Source: XF Type: UNKNOWN ms-csrss-privilege-escalation(64917) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:12476 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||