Detections
Analytics

ScriptLogic Multiple Service Remote Privilege Escalation

critical Nessus Plugin ID 11562

Synopsis

The remote service may be vulnerable to an access control breach.

Description

The ScriptLogic service is running on this port.

There is a flaw in versions up to 4.05 of this service which may allow an attacker to write arbitrary values in the remote registry with administrator privileges, which can be used to gain a shell on this host.

*** Since Nessus was unable to determine the version of ScriptLogic
*** running on this host, this might be a false positive.

Solution

Upgrade to ScriptLogic 4.15 or later.

Plugin Details

Severity: Critical

ID: 11562

File Name: smb_svc_scriptlogic.nasl

Version: 1.15

Type: local

Agent: windows

Family: Windows

Published: 5/4/2003

Updated: 7/30/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Required KB Items: SMB/svcs

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 5/1/2003

Reference Information

CVE: CVE-2003-1121

BID: 7475, 7477

CERT: 231705