CVE-2009-0320 Information disclosure in n/a
Local attackers can read I/O metrics to infer sensitive data like passwords entered by other users via a benchmarking attack.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2009-0320?
CVE-2009-0320 is a medium-severity vulnerability in Microsoft Windows Server 2003, published on 28 Jan 2009. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager (aka taskmgr.exe) to estimate the number of characters that a different user entered at a runas.exe password prompt, related to a "benchmarking attack."
Which versions are affected by CVE-2009-0320?
It affects 4 products.
Products include Microsoft Windows Server 2003, Microsoft Windows Server 2008, Microsoft Windows Vista, Microsoft Windows Xp.
How do I fix CVE-2009-0320?
No fix has been published for CVE-2009-0320 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-0320 being exploited?
There is no known exploitation of CVE-2009-0320 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Windows Server 2003
Sources
Also known as GHSA-444h-qfvw-6mmm.