Summary
This host is missing an important security
update according to Microsoft Bulletin MS15-014.
Impact
Successful exploitation could allow remote
attackers to modify domain controller responses to client requests and revert the Group Policy settings on a system back to default.
Impact Level: System
Solution
Run Windows Update and update the
listed hotfixes or download and update mentioned hotfixes in the advisory from the below link,
https://technet.microsoft.com/library/security/MS15-014
Insight
The flaw is due to an error in the Group
Policy application of Security Configuration policies.
Affected
Microsoft Windows 8 x32/x64
Microsoft Windows Server 2012/R2
Microsoft Windows 8.1 x32/x64 Edition
Microsoft Windows 7 x32/x64 Edition Service Pack 1 and prior Microsoft Windows 2003 x32/x64 Edition Service Pack 2 and prior Microsoft Windows Vista x32/x64 Edition Service Pack 2 and prior Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 and prior Microsoft Windows Server 2008 x32/x64 Edition Service Pack 2 and prior.
Detection
Get the vulnerable file version and
check appropriate patch is applied or not.
References
Severity
Classification
-
CVE CVE-2015-0009 -
CVSS Base Score: 3.3
AV:A/AC:L/Au:N/C:N/I:P/A:N
Related Vulnerabilities
- MS Exchange Server WebReady Document Viewing Remote Code Execution Vulnerabilities (2740358)
- Microsoft FAST Search Server 2010 SharePoint RCE Vulnerabilities (2784242)
- Microsoft Windows ASP.NET Denial of Service Vulnerability(970957)
- Microsoft Windows Group Policy Security Feature Bypass Vulnerability (3004361)
- Microsoft Windows Error Reporting Security Feature Bypass Vulnerability (3004365)