CVE-2003-0910

Windows NT and Windows 2000 - Local Privilege Escalation via NtSetLdtEntries

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2003-0910. PoCs published by [email protected].

AI-analyzed exploit summary This exploit leverages a privilege escalation vulnerability in the Microsoft Windows Local Descriptor Table (LDT) programming interface. It manipulates LDT entries to point into protected kernel memory, allowing arbitrary code execution with elevated privileges.

Description

The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.

Exploits (1)

exploitdb WORKING POC VERIFIED

by [email protected] · clocalwindows

https://www.exploit-db.com/exploits/23989

View Code ZIP pw:eip

This exploit leverages a privilege escalation vulnerability in the Microsoft Windows Local Descriptor Table (LDT) programming interface. It manipulates LDT entries to point into protected kernel memory, allowing arbitrary code execution with elevated privileges.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: Microsoft Windows 2000 Professional SP4

Auth required

Prerequisites: Local access to the target system · Knowledge of kernel memory addresses

MITRE ATT&CK