• info
• discussion
• exploit
• solution
• references

Microsoft Windows RPCSS Service Isolation Local Privilege Escalation Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for more information.


Microsoft Windows Server 2003 Datacenter Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows XP Media Center Edition SP2

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923


• Microsoft Security Update for Windows XP (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=73d2324f-be59 -4b0c-b1ac-9876a13c2c03

Microsoft Windows Server 2003 Itanium SP1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=6ADA372B-BA17 -433E-B022-D2C57B35AF8A


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=fda8837c-e5d2 -4489-9b44-4c24a1102e77

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=6ADA372B-BA17 -433E-B022-D2C57B35AF8A


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=fda8837c-e5d2 -4489-9b44-4c24a1102e77

Microsoft Windows Server 2003 Datacenter x64 Edition SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923


• Microsoft Security Update for Windows XP (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=73d2324f-be59 -4b0c-b1ac-9876a13c2c03

Microsoft Windows XP Media Center Edition SP3

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923


• Microsoft Security Update for Windows XP (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=73d2324f-be59 -4b0c-b1ac-9876a13c2c03

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows Server 2003 Standard Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows XP x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=A794C32A-9A0C -47D9-9C57-FF5D4A8E4944


• Microsoft Security Update for Windows XP x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2f12ae5-0e46 -47e1-ac5b-93550d030189

Microsoft Windows Server 2003 x64 SP1

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123

Microsoft Windows Server 2003 x64 SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123

Microsoft Windows Server 2003 Enterprise x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123

Microsoft Windows XP Tablet PC Edition SP3

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923


• Microsoft Security Update for Windows XP (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=73d2324f-be59 -4b0c-b1ac-9876a13c2c03

Microsoft Windows Server 2003 Datacenter x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123

Microsoft Windows Server 2003 Enterprise Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows Server 2003 SP2

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows Server 2003 Standard Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows XP Home SP2

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923


• Microsoft Security Update for Windows XP (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=73d2324f-be59 -4b0c-b1ac-9876a13c2c03

Microsoft Windows Server 2003 SP1

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=6ADA372B-BA17 -433E-B022-D2C57B35AF8A


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=fda8837c-e5d2 -4489-9b44-4c24a1102e77

Microsoft Windows XP Professional x64 Edition

• Microsoft Security Update for Windows XP x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=A794C32A-9A0C -47D9-9C57-FF5D4A8E4944


• Microsoft Security Update for Windows XP x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2f12ae5-0e46 -47e1-ac5b-93550d030189

Microsoft Windows Server 2003 Web Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows XP Home SP3

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923


• Microsoft Security Update for Windows XP (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=73d2324f-be59 -4b0c-b1ac-9876a13c2c03

Microsoft Windows XP Professional SP3

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923

Microsoft Windows XP Professional SP2

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923

Microsoft Windows Server 2003 Datacenter Edition Itanium SP1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=6ADA372B-BA17 -433E-B022-D2C57B35AF8A


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=fda8837c-e5d2 -4489-9b44-4c24a1102e77

Microsoft Windows Server 2003 Standard x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123

Microsoft Windows Server 2003 Enterprise x64 Edition SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123