Title

Microsoft Windows Netlogon Privilege Escalation Vulnerability (MS15-071) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in NETLOGON. To exploit this vulnerability, the attacker would gain access to a primary domain controller (PDC) on a target network. If successfully exploited, an attacker could then run a specially crafted application that could establish a secure channel to the PDC as a backup domain controller (BDC) and may be able to disclose credentials.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-61111

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.