CVE-2009-0079: Medium severity Microsoft Windows Server 2003 vulnerability
The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows RPCSS Service Isolation Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0079?
CVE-2009-0079 is classified as a critical vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2009-0079?
To fix CVE-2009-0079, install the appropriate security updates provided by Microsoft for affected versions of Windows XP and Windows Server 2003.
What versions of Windows are affected by CVE-2009-0079?
CVE-2009-0079 affects Microsoft Windows XP SP2 and SP3, as well as Microsoft Windows Server 2003 SP1 and SP2.
Can CVE-2009-0079 be exploited remotely?
No, CVE-2009-0079 requires local access, which means it cannot be exploited remotely.
What are the potential impacts of CVE-2009-0079?
The potential impacts of CVE-2009-0079 include unauthorized local access that could lead to privilege escalation and possible system compromise.