CVE-2009-0079
The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account,…
Does this matter?
Lower severity and a low EPSS score (4.06%). Track it; it rarely justifies an emergency change on its own.
Description
The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows RPCSS Service Isolation Vulnerability."
- CVSS 2.0
- 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 4.06% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- microsoft/windows server 2003 · microsoft/windows xp
- Source
- secure@microsoft.com
References
- http://osvdb.org/53667
- http://www.securitytracker.com/id?1022044
- http://www.us-cert.gov/cas/techalerts/TA09-104A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2009/1026
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6147
- http://osvdb.org/53667
- http://www.securitytracker.com/id?1022044
- http://www.us-cert.gov/cas/techalerts/TA09-104A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2009/1026
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6147
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.