Jump to content
Search In
  • More options...
Find results that contain...
Find results in...
  • Very Popular

    Serious vulnerability in Windows Print Spooler "Print Nightmare"

    Kryptera.se

    If you have the "Print Spooler" service enabled (which is the default), it means that anyone with access can execute code as SYSTEM against the Windows domain controller. At present, there is no patch from Microsoft. So take a break from your vacation and turn off the service immediately.

    From Tenable's blog:

    Quote

    Exploitation of CVE-2021-1675 could give remote attackers full control of vulnerable systems. To achieve RCE, attackers would need to target a user authenticated to the spooler service. Without authentication, the flaw could be exploited to elevate privileges, making this vulnerability a valuable link in an attack chain.

    More information from Microsoft: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1675

     

    Discuss the Guide

    Recommended Comments

    There are no comments to display.



    Please sign in to comment

    You will be able to leave a comment after signing in



    Sign In Now
     Share

    • Articles

      About the Author

      On Kryptera.se, writes the IT security specialist Jonas Lejon who has worked with encryption and qualified IT security for over 18 years. The site is independent and non-profit.

      Jonas is one of Sweden's foremost experts in cyber security. Feel free to contact him on telephone number 010 1889848 or jonas@triop.se if your organization needs help with cyber security. You can also contact me on LinkedIn or Twitter.

      This article has been reposted with permission from Jonas Lejon.

×
×
  • Create New...