Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Microsoft Exchange vulnerable to PrivExchange zero-day

29 Jan 2019   #1
Brink

64-bit Windows 10 Pro
 
 
Microsoft Exchange vulnerable to PrivExchange zero-day

Quote:
Microsoft Exchange 2013 and newer are vulnerable to a zero-day named "PrivExchange" that allows a remote attacker with just the credentials of a single lowly Exchange mailbox user to gain Domain Controller admin privileges with the help of a simple Python tool.

Details about this zero-day have been made public last week by Dirk-jan Mollema, a security researcher with Dutch cyber-security firm Fox-IT.

According to the researcher, the zero-day isn't one single flaw, but a combination of three (default) settings and mechanisms that an attacker can abuse to escalate his access from a hacked email account to the admin of the company's internal domain controller (a server that handles security authentication requests within a Windows domain). The three issues, according to Mollema, are:


Read more: Microsoft Exchange vulnerable to 'PrivExchange' zero-day | ZDNet


My System SpecsSystem Spec
.
Reply

 Microsoft Exchange vulnerable to PrivExchange zero-day




Thread Tools




Similar help and support threads
Thread Forum
Microsoft Exchange 2010
Hi all, is anyone aware of a website that sells Microsoft Exchange 2010 for a monthly fee, as i know that VPS providers sell you Windows Server 2008 r2 for e.g 10 a month. Is there any website you are aware of that does this for Microsoft Exchange 2010? Many thanks,
Software
Microsoft Exchange / Outlook 2007 via VPN
Hello, I am having a problem Opening Microsoft Outlook 2007. I have two computers side by side. One is running Vista Ultimate the other is Windows 7 Beta 32-bit. I connect to my LAN via SonicWall Global VPN Client. I am trying to configure my Outlook 2007 Exchange account on the...
Microsoft Office
Microsoft Exchange - Authentication^infintity
Incase you didnt get the title it means.... When i connect to exchange it asks me for my username and password OVER AND OVER AGIN then eventualy it stops and says "Could not connect to micorsft exchange server" Here is my exchange information... My Email: Mitchell@noodlesoftware.com...
Browsers & Mail


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:51.
Twitter Facebook Google+