CVE-2004-2176

The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-09-16

Affected products

• Windows Xp (Microsoft)

References

• http://www.securityfocus.com/archive/1/378508
• http://www.securityfocus.com/bid/11410