CVE-2004-2176: Microsoft Windows XP

Medium severity, CVSS 4.6. EPSS: 2.8% chance of exploitation in the next 30 days.

The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls.

Affected products

• Microsoft Windows XP: any version

Published 2004-12-31. Last modified 2026-06-16.