Microsoft Windows SMB Registry : SNMP Registry Key Permission Weakness Local Privilege Escalation

Medium Nessus Plugin ID 11868


Local users can gain additional privileges.


The registry key HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters can be modified by users who are not in the admin group.

Write access to this key allows an unprivileged user to gain additional privileges.


Use regedt32 and set the permissions of this key to :

- admin group : Full Control
- system : Full Control
- everyone : Read

See Also

Plugin Details

Severity: Medium

ID: 11868

File Name: smb_reg_snmp_access.nasl

Version: $Revision: 1.23 $

Type: local

Agent: windows

Family: Windows

Published: 2003/10/08

Modified: 2017/12/19

Dependencies: 10400, 10394, 10150

Risk Information

Risk Factor: Medium


Base Score: 4.6

Temporal Score: 4.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:W/RC:ND

Vulnerability Information

Required KB Items: SMB/transport, SMB/name, SMB/login, SMB/password, SMB/registry_access

Vulnerability Publication Date: 2000/12/06

Reference Information

CVE: CVE-2001-0046

BID: 2066

OSVDB: 10648

MSFT: MS00-095