Microsoft Windows 2000 Network Connection Manager权限提升漏洞发布时间：2002-08-21 更新时间：2002-08-21 严重程度：高 威胁程度：权限提升 错误类型：设计错误 利用方式：服务器模式 BUGTRAQ ID：5480 CVE(CAN) ID：CAN-2002-0720 受影响系统 Microsoft Windows 2000 Advanced Server SP3详细描述 Network Connection Manager (NCM)提供主机系统所有网络连接管理的控制机制，每当网络连接建立时NCM就会调用一个处理过程(handler routine)进行处理。 默认设计中，这个处理过程(handler routine)以用户安全上下文环境下执行，但是存在一个缺陷可以使非特权用户通过比较复杂的处理，让处理过程(handler routine)运行在LocalSystem用户安全上下文环境中。攻击者利用这个缺陷指定自己的恶意代码作为这个处理过程的句柄，然后建立一个网络连接，使NCM调用这个代码，这样这个代码就会以SYSTEM的权限执行。 测试代码 无 解决方案 补丁下载： Microsoft Windows 2000 Professional SP3: Microsoft Patch Q326886 http://www.microsoft.com/Release.asp?ReleaseID=41406 This patch may be applied to Windows 2000 SP2 or SP3 systems. Microsoft Windows 2000 Server SP3: Microsoft Patch Q326886 http://www.microsoft.com/Release.asp?ReleaseID=41406 This patch may be applied to Windows 2000 SP2 or SP3 systems. Microsoft Windows 2000 Advanced Server SP3: Microsoft Patch Q326886 http://www.microsoft.com/Release.asp?ReleaseID=41406 This patch may be applied to Windows 2000 SP2 or SP3 systems. Microsoft Windows 2000 Terminal Services SP3: Microsoft Patch Q326886 http://www.microsoft.com/Release.asp?ReleaseID=41406 This patch may be applied to Windows 2000 SP2 or SP3 systems. Microsoft Windows 2000 Datacenter Server SP3: Microsoft Patch Q326886 http://www.microsoft.com/Release.asp?ReleaseID=41406 This patch may be applied to Windows 2000 SP2 or SP3 systems. Microsoft Windows 2000 Advanced Server SP2: Microsoft Patch Q326886 http://www.microsoft.com/Release.asp?ReleaseID=41406 This patch may be applied to Windows 2000 SP2 or SP3 systems. Microsoft Windows 2000 Datacenter Server SP2: Microsoft Patch Q326886 http://www.microsoft.com/Release.asp?ReleaseID=41406 This patch may be applied to Windows 2000 SP2 or SP3 systems. Microsoft Windows 2000 Professional SP2: Microsoft Patch Q326886 http://www.microsoft.com/Release.asp?ReleaseID=41406 This patch may be applied to Windows 2000 SP2 or SP3 systems. Microsoft Windows 2000 Server SP2: Microsoft Patch Q326886 http://www.microsoft.com/Release.asp?ReleaseID=41406 This patch may be applied to Windows 2000 SP2 or SP3 systems. Microsoft Windows 2000 Terminal Services SP2: Microsoft Patch Q326886 http://www.microsoft.com/Release.asp?ReleaseID=41406 This patch may be applied to Windows 2000 SP2 or SP3 systems. 相关信息 Microsoft Security Bulletin MS02-042. 参考：http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS02-042.asp |
