The ugidd RPC interface by design allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.

A version of finger is running that exposes valid user information to any entity on the network.

ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.

In older versions of Sendmail, an attacker could use a pipe character to execute root commands.

The Perl fingerd program allows arbitrary command execution from remote users.

Sendmail WIZ command enabled, allowing root access.

Latest Servicing Stack Updates

Microsoft Office Defense in Depth Update

Microsoft SharePoint Server Defense in Depth Update

Memory Integrity System Readiness Scan Tool Defense in Depth Update

Microsoft Office Defense in Depth Update

Microsoft Guidance for Addressing Security Feature Bypass in Trend Micro EFI Modules

Guidance on Microsoft Signed Drivers Being Used Maliciously

Guidance on Microsoft Signed Drivers Being Used Maliciously

Microsoft Defense in Depth Update

Microsoft Guidance on Intel Processor MMIO Stale Data Vulnerabilities

Upcoming improvements to Azure Data Factory and Azure Synapse Pipeline infrastructure in response to CVE-2022-29972