CVE-2004-2730

published 2004-12-31

CVE-2004-2730: Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before…

Priority P4 15 medium 4.6 CVSS 2.0

AV L AC L Au N C P I P A P

Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
microsoft	psexec	<= 1.53	—
microsoft	psgetsid	<= 1.40	—
microsoft	psinfo	<= 1.60	—
microsoft	pskill	<= 1.02	—
microsoft	pslist	<= 1.25	—
microsoft	psloglist	<= 2.50	—
microsoft	pspasswd	<= 1.20	—
microsoft	psservice	<= 2.11	—
microsoft	psshutdown	<= 2.31	—
microsoft	pssuspend	<= 1.04	—
microsoft	sysinternals_pstools	<= 2.04	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-264