MS15-071: Vulnerability in NETLOGON Could Allow Elevation of Privilege (3068457)
Low Nessus Plugin ID 84735
SynopsisThe remote Windows host is affected by a privilege escalation vulnerability.
DescriptionThe remote Windows host is affected by a privilege escalation vulnerability due to the Netlogon service improperly establishing a communications channel to a primary domain controller (PDC). An attacker, with access to the PDC, can exploit this by using a crafted application to create a secure channel to the PDC as a backup domain controller (BDC), possibly allowing access to sensitive credential information.
Note that this vulnerability only affects a server if it is configured as a domain controller.
SolutionMicrosoft has released a set of patches for Windows 2003, 2008, 2008 R2, 2012, and 2012 R2.