Description
The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."
References
- oval:org.mitre.oval:def:3055 vdb-entry signature
- TA05-039A third-party-advisory
- oval:org.mitre.oval:def:2292 vdb-entry signature
- MS05-007 vendor-advisory
- 1013112 vdb-entry
- 12486 vdb-entry
- win-named-pipe-information-disclosure(19093) vdb-entry
- VU#939074 third-party-advisory
- 14189 third-party-advisory