MS15-071: Vulnerability in NETLOGON Could Allow Elevation of Privilege (3068457)

Low Nessus Plugin ID 84735


The remote Windows host is affected by a privilege escalation vulnerability.


The remote Windows host is affected by a privilege escalation vulnerability due to the Netlogon service improperly establishing a communications channel to a primary domain controller (PDC). An attacker, with access to the PDC, can exploit this by using a crafted application to create a secure channel to the PDC as a backup domain controller (BDC), possibly allowing access to sensitive credential information.

Note that this vulnerability only affects a server if it is configured as a domain controller.


Microsoft has released a set of patches for Windows 2003, 2008, 2008 R2, 2012, and 2012 R2.

See Also

Plugin Details

Severity: Low

ID: 84735

File Name: smb_nt_ms15-071.nasl

Version: $Revision: 1.5 $

Type: local

Agent: windows

Published: 2015/07/14

Modified: 2017/07/24

Dependencies: 13855, 57033

Risk Information

Risk Factor: Low


Base Score: 2.1

Temporal Score: 1.8

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2015/07/14

Vulnerability Publication Date: 2015/07/14

Reference Information

CVE: CVE-2015-2374

BID: 75633

OSVDB: 124596

MSFT: MS15-071

MSKB: 3068457

IAVA: 2015-A-0173