{"api_version":"1","generated_at":"2026-07-23T04:31:27+00:00","cve":"CVE-2004-2730","urls":{"html":"https://cve.report/CVE-2004-2730","api":"https://cve.report/api/cve/CVE-2004-2730.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2004-2730","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2004-2730"},"summary":{"title":"CVE-2004-2730","description":"Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.","state":"PUBLISHED","assigner":"mitre","published_at":"2004-12-31 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.6","severity":"","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/10759","name":"http://www.securityfocus.com/bid/10759","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Sysinternals PsTools Remote Unauthorized Access Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/12108","name":"http://secunia.com/advisories/12108","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Secunia - Advisories - Sysinternals PsTools Fails to Disconnect from Shares","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304","name":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Sysinternals PsTools utilities share mapping vulnerability","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://securitytracker.com/id?1010737","name":"http://securitytracker.com/id?1010737","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - Sysinternals PsTools Fails to Disconnect Share Access Allowing Local Users to Gain Administrative Access on Remote Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16743","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16743","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/8140","name":"http://www.osvdb.org/8140","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-2730","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-2730","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2004","cve_id":"2730","vulnerable":"1","versionEndIncluding":"1.53","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"psexec","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"2730","vulnerable":"1","versionEndIncluding":"1.40","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"psgetsid","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"2730","vulnerable":"1","versionEndIncluding":"1.60","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"psinfo","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"2730","vulnerable":"1","versionEndIncluding":"1.02","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"pskill","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"2730","vulnerable":"1","versionEndIncluding":"1.25","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"pslist","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"2730","vulnerable":"1","versionEndIncluding":"2.50","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"psloglist","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"2730","vulnerable":"1","versionEndIncluding":"1.20","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"pspasswd","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"2730","vulnerable":"1","versionEndIncluding":"2.11","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"psservice","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"2730","vulnerable":"1","versionEndIncluding":"2.31","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"psshutdown","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"2730","vulnerable":"1","versionEndIncluding":"1.04","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"pssuspend","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"2730","vulnerable":"1","versionEndIncluding":"2.04","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"sysinternals_pstools","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T01:36:25.298Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304"},{"name":"10759","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/10759"},{"name":"12108","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/12108"},{"name":"1010737","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1010737"},{"name":"8140","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/8140"},{"name":"pstools-gain-admin-access(16743)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16743"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2004-07-15T00:00:00.000Z","descriptions":[{"lang":"en","value":"Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304"},{"name":"10759","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/10759"},{"name":"12108","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/12108"},{"name":"1010737","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1010737"},{"name":"8140","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/8140"},{"name":"pstools-gain-admin-access(16743)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16743"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2004-2730","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304","refsource":"MISC","url":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304"},{"name":"10759","refsource":"BID","url":"http://www.securityfocus.com/bid/10759"},{"name":"12108","refsource":"SECUNIA","url":"http://secunia.com/advisories/12108"},{"name":"1010737","refsource":"SECTRACK","url":"http://securitytracker.com/id?1010737"},{"name":"8140","refsource":"OSVDB","url":"http://www.osvdb.org/8140"},{"name":"pstools-gain-admin-access(16743)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16743"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2004-2730","datePublished":"2007-10-09T10:00:00.000Z","dateReserved":"2007-10-08T00:00:00.000Z","dateUpdated":"2024-08-08T01:36:25.298Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2004-12-31 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psexec:*:*:*:*:*:*:*:*","versionEndIncluding":"1.53","matchCriteriaId":"A6C140D7-0DA3-453B-A06D-070DEBD943A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psgetsid:*:*:*:*:*:*:*:*","versionEndIncluding":"1.40","matchCriteriaId":"4B9E0C2C-4BF7-4DBF-964E-F033943BEA73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psinfo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.60","matchCriteriaId":"A550D0AA-1C64-4F47-BC34-50938AD19647"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pskill:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"DC22873C-3E90-48F8-A7A0-924B77E6E14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pslist:*:*:*:*:*:*:*:*","versionEndIncluding":"1.25","matchCriteriaId":"68257748-F761-445C-A656-0E9390AB4723"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psloglist:*:*:*:*:*:*:*:*","versionEndIncluding":"2.50","matchCriteriaId":"406120EC-5A6F-4C35-87CC-704A81276A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pspasswd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.20","matchCriteriaId":"30C0566A-E0C8-48F8-AFAB-9B791E683FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psservice:*:*:*:*:*:*:*:*","versionEndIncluding":"2.11","matchCriteriaId":"D0A29E57-7FED-43A7-8F2E-413D3A3DA08E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psshutdown:*:*:*:*:*:*:*:*","versionEndIncluding":"2.31","matchCriteriaId":"292787CF-D353-44D3-BBFE-F61A693D2B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pssuspend:*:*:*:*:*:*:*:*","versionEndIncluding":"1.04","matchCriteriaId":"A76A6F29-D9EA-4C09-91D1-4408EDB4965C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sysinternals_pstools:*:*:*:*:*:*:*:*","versionEndIncluding":"2.04","matchCriteriaId":"026F39FC-E2B0-411C-A4D9-FC3DD0AC200D"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2004","CveId":"2730","Ordinal":"1","Title":"CVE-2004-2730","CVE":"CVE-2004-2730","Year":"2004"},"notes":[{"CveYear":"2004","CveId":"2730","Ordinal":"1","NoteData":"Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.","Type":"Description","Title":"CVE-2004-2730"},{"CveYear":"2004","CveId":"2730","Ordinal":"2","NoteData":"2007-10-09","Type":"Other","Title":"Published"},{"CveYear":"2004","CveId":"2730","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}