Microsoft Interix vulnerabilities

3 CVEs affecting Microsoft Interix, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0537, published 2009-03-09.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0210: Microsoft Windows Privilege Escalation Vulnerability, published 2004-08-06. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 7.2% chance of exploitation in the next 30 days. The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer…
• CVE-2002-0020, published 2002-03-08. High severity, CVSS 7.5. EPSS: 16.9% chance of exploitation in the next 30 days. Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options.
• CVE-2009-0537, published 2009-03-09. Medium severity, CVSS 4.9. EPSS: 3.6% chance of exploitation in the next 30 days. Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of…