Privilege Escalation Vulnerability in Microsoft Windows POSIX OS subsystem

Reported July 13, 2004, byMicrosoft

VERSIONS AFFECTED

DESCRIPTION
A privilege-elevation vulnerability exists in the POSIX OS subsystem. Although thisvulnerability is not exploitable remotely, a potential attacker whosuccessfully exploited the vulnerability could take complete control of anaffected system.

VENDOR RESPONSE
Microsoft has releasedbulletin MS04-020, "Vulnerability in POSIX Could Allow CodeExecution (841872)," to address this vulnerability and recommends thataffected users apply the appropriate patch listed in the bulletin.

CREDIT
Discovered by Rafal Wojtczuk.