Microsoft Windows Failover Clustering File Permissions Security Bypass Vulnerability

Bugtraq ID:	43818
Class:	Design Error
CVE:	CVE-2010-3223
Remote:	No
Local:	Yes
Published:	Oct 12 2010 12:00AM
Updated:	Nov 10 2010 10:17PM
Credit:	Microsoft
Vulnerable:	Microsoft Windows Server 2008 R2 x64 0 Microsoft Windows Server 2008 R2 Itanium 0
Not Vulnerable:	Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows Vista x64 Edition SP2 Microsoft Windows Vista x64 Edition SP1 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for x64-based Systems 0 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems 0 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems 0 Microsoft Windows Server 2003 x64 SP2 Microsoft Windows Server 2003 Itanium SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows 7 for x64-based Systems 0 Microsoft Windows 7 for 32-bit Systems 0

Microsoft Windows Failover Clustering File Permissions Security Bypass Vulnerability

Microsoft Windows Failover Clustering is prone to a security-bypass vulnerability.

Local attackers can exploit this issue to perform unauthorized actions against the administrative shares on the failover cluster disk.

Microsoft Windows Failover Clustering File Permissions Security Bypass Vulnerability

Attackers can use standard commands or readily available tools to exploit this issue.

Microsoft Windows Failover Clustering File Permissions Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Microsoft Windows Failover Clustering File Permissions Security Bypass Vulnerability

References:

• MS10-086: Disk Clustering Vulnerability (Microsoft)
  
• Product Hompage (Microsoft)
  
• Vendor Hompage (Microsoft)
  
• Microsoft Security Bulletin MS10-086 (Microsoft)