[Full-disclosure] [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability

2005-12-13 Thread Advisories
Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability Release Date: December 13, 2005 Date Reported: May 23, 2005 External Refferences: eEye ID# EEYEB-20050523 OSVDB ID# 18823 CVE # CAN-2005-2827 Microsoft # MS05-055 Severity: Medium (Local Privilege Escalation to Kernel)

Re: [Full-disclosure] [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability

2005-12-13 Thread Joshua Russel
It is a local vulnerability, then how does Retina claims to scan it remotely? On 12/13/05, Advisories [EMAIL PROTECTED] wrote: Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability Release Date: December 13, 2005 Date Reported: May 23, 2005 External Refferences: eEye

Re: [Full-disclosure] [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability

2005-12-13 Thread Ron
Some versions of Nessus can log in through SSH and check the system locally. I'm unsure if Retina can do that, but it wouldn't surprise me. Joshua Russel wrote: It is a local vulnerability, then how does Retina claims to scan it remotely? On 12/13/05, Advisories [EMAIL PROTECTED] wrote: