CVE-2014-4076 | Vulnerability Database | Aqua Security

NVD

https://nvd.nist.gov/vuln/detail/CVE-2014-4076

CWE

https://cwe.mitre.org/data/definitions/264.html

Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka TCP/IP Elevation of Privilege Vulnerability.

Affected Software

Name	Vendor	Start Version	End Version
Windows_server_2003	Microsoft	*	*

References

http://www.exploit-db.com/exploits/35936
http://www.osvdb.org/114532
http://www.securityfocus.com/bid/70976
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-070
https://www.exploit-db.com/exploits/37755/
http://www.exploit-db.com/exploits/35936
http://www.osvdb.org/114532
http://www.securityfocus.com/bid/70976
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-070
https://www.exploit-db.com/exploits/37755/