CVE-2014-4076
EXPLOITEDMicrosoft Windows Server 2003 SP2 - Privilege Escalation
Title source: llmExploitation Summary
CVE-2014-4076 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 5 public exploits from researchers including Tomislav Paskalev, KoreLogic, fungoshacks, including a Metasploit module exploits/windows/local/ms14_070_tcpip_ioctl.
AI-analyzed exploit summary This is a functional privilege escalation exploit for CVE-2014-4076, targeting Windows 2003 SP2 x86. It leverages a vulnerability in the TCP/IP stack's IOCTL handling to execute arbitrary code in kernel mode, spawning a SYSTEM-level command shell.
Description
Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability."
Exploits (5)
This is a functional privilege escalation exploit for CVE-2014-4076, targeting Windows 2003 SP2 x86. It leverages a vulnerability in the TCP/IP stack's IOCTL handling to execute arbitrary code in kernel mode, spawning a SYSTEM-level command shell.
This is a detailed technical writeup for CVE-2014-4076, a privilege escalation vulnerability in Microsoft Windows Server 2003 SP2's TCP/IP driver. It includes root cause analysis, crash dump analysis, and exploitation details but does not contain functional exploit code.
This is a C++ rewrite of the original Python exploit for CVE-2014-4076, targeting a privilege escalation vulnerability in Windows 2003's tcpip.sys driver. It leverages a kernel memory corruption bug to escalate from Administrator to SYSTEM by sending a crafted IOCTL request.
This Metasploit module exploits a NULL pointer dereference in the Microsoft TCP/IP driver (tcpip.sys) via a crafted IOCTL request to elevate privileges to SYSTEM on Windows Server 2003 SP2. It includes token-stealing shellcode and memory manipulation to trigger the vulnerability.