ScriptLogic Multiple Service Remote Privilege Escalation

Critical Nessus Plugin ID 11562


The remote service may be vulnerable to an access control breach.


The ScriptLogic service is running on this port.

There is a flaw in versions up to 4.05 of this service which may allow an attacker to write arbitrary values in the remote registry with administrator privileges, which can be used to gain a shell on this host.

*** Since Nessus was unable to determine the version of ScriptLogic
*** running on this host, this might be a false positive.


Upgrade to ScriptLogic 4.15 or later.

Plugin Details

Severity: Critical

ID: 11562

File Name: smb_svc_scriptlogic.nasl

Version: $Revision: 1.14 $

Type: local

Agent: windows

Family: Windows

Published: 2003/05/04

Modified: 2016/12/09

Dependencies: 10456

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

Required KB Items: SMB/svcs

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 2003/05/01

Reference Information

CVE: CVE-2003-1121

BID: 7475, 7477

OSVDB: 15657, 15658

CERT: 231705