The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_xp | Microsoft | * | * |