MS05-047: Plug and Play Remote Code Execution and Local Privilege Elevation (905749) (uncredentialed check)
Critical Nessus Plugin ID 21193
SynopsisA flaw in the Plug and Play service may allow an authenticated attacker to execute arbitrary code on the remote host and, therefore, elevate his privileges.
DescriptionThe remote host contains a version of the Plug and Play service that contains a vulnerability in the way it handles user-supplied data.
An authenticated attacker may exploit this flaw by sending a malformed RPC request to the remote service and execute code with SYSTEM privileges.
Note that authentication is not required against Windows 2000 if the MS05-039 patch is missing.
SolutionMicrosoft has released a set of patches for Windows 2000 and XP.