Encyclopedia

MS09-026

 
Threat LevelLow threatDamageHighDistributionNot widespread
Common name:MS09-026
Technical name:MS09-026
Threat level:Medium
Alias:Vulnerability in RPC Could Allow Elevation of Privilege
Type:Vulnerability
Effects:  

It is an important vulnerability in the Windows remote procedure call (RPC) on Windows Server 2008/Vista/2003/XP/2000 computers, which allows hackers to gain local privilege escalation.

Affected platforms:

Windows 2003/XP/2000

First detected on:June 10, 2009
Detection updated on:June 11, 2009
StatisticsNo

Brief Description 

    

MS09-026 is not categorized as virus, worm, Trojan or backdoor. It is an important vulnerability in the Windows remote procedure call (RPC) on Windows Server 2008/Vista/2003/XP/2000 computers, which allows to gain local privilege escalation.

If exploited successfully, MS09-026 allows to gain unauthorized privileges on a computer or network. An example of privilege elevation would be an unprivileged user who could manage to be added to the Administrator's group. In such case, the hacker could take complete control of the system: create, modify or delete files, install programs, create new user accounts, etc.

MS09-026 is usually exploited by creating a specially crafted RPC message and seding it to an affected system over an affected TCP or UDP port.

 

If you have a Windows Server 2008/Vista/2003/XP/2000 computer, it is recommended to download and apply the security patch for this vulnerability. Click here to access the web page for downloading the patch.

Bear in mind that this security patch replaces a previous one, called MS07-058.

Last updated:  11/06/2009 

Virus News

3/10/09.-More than 10 Million Worldwide Were Actively Exposed to Identity Theft in 2008

3/5/09.-Cyber-crooks manipulate Internet searches to sell fake antivirus products

3/2/09.-VideoPlay adware infections grew 400% in February through malicious use of Web 2.0 pages

[+ Noticias]