Microsoft Windows Server 2008 SP2 is prone to privilege escalation vulnerability. This NVT has been replaced by NVT secpod_ms12-012.nasl (OID:1.3.6.1.4.1.25623.1.0.902791).

Successful attempt could allow local attackers to bypass security restrictions and gain the privileges. Impact Level: System

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms12-012

The flaw is due to an error in the Color Control Panel, which allows attackers to gain privileges via a Trojan horse sti.dll file in the current working directory.

Microsoft Windows Server 2008 SP2

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5082
• http://shinnai.altervista.org/exploits/SH-006-20100914.html
• http://www.koszyk.org/b/archives/82

---

Updated on 2015-03-25