Description
Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.
References (6)
Core 6
Core References
Various Sources x_refsource_misc
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/10759
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/12108
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1010737
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/8140
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16743
Scores
EPSS
0.0151
EPSS Percentile
71.9%
Details
CWE
CWE-264
Status
published
Products (11)
microsoft/psexec
< 1.53
microsoft/psgetsid
< 1.40
microsoft/psinfo
< 1.60
microsoft/pskill
< 1.02
microsoft/pslist
< 1.25
microsoft/psloglist
< 2.50
microsoft/pspasswd
< 1.20
microsoft/psservice
< 2.11
microsoft/psshutdown
< 2.31
microsoft/pssuspend
< 1.04
... and 1 more
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026