Vulnerability Description
The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows Xp | All versions |
References
- http://www.securityfocus.com/archive/1/378508
- http://www.securityfocus.com/bid/11410Exploit
- http://www.securityfocus.com/archive/1/378508
- http://www.securityfocus.com/bid/11410Exploit
FAQ
What is CVE-2004-2176?
CVE-2004-2176 is a vulnerability with a CVSS score of 4.6 (MEDIUM). The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypa...
How severe is CVE-2004-2176?
CVE-2004-2176 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2004-2176?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows Xp.