Rogue_Kdc

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is related to an elevation of privilege vulnerability that exists when Group Policy improperly checks access. This could allow an attacker to run processes in an elevated context. To exploit this, an attacker would first need to log on to the system and then run a specially crafted application to take control over the affected system. The vulnerability is also described as a buffer overflow issue in the Group Policy Services of the Windows operating system, which could allow an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a lack of proper access control in the Windows group policy, allowing a remote attacker to potentially elevate their privileges and execute arbitrary code using a specially crafted application. This can affect the system, enabling attackers to impact it.

The issue allows a local attacker to disclose sensitive information or create a denial-of-service condition on affected installations. To exploit this, an attacker must first obtain the ability to execute low-privileged code on the target system.