This host is missing a critical security update according to Microsoft Bulletin MS07-053.

Successful exploitation allows remote attackers to execute arbitrary code with escalated privileges by running a specially crafted setuid binary. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/ms07-053.mspx

The flaw is due to an unspecified error in Windows Services for UNIX and the Subsystem for UNIX-based Applications component when handling connection credentials for setuid binaries.

Microsoft Windows XP Service Pack 2 and prior. Microsoft Windows 2000 ervice Pack 4 and prior. Microsoft Windows 2K3 Service Pack 2 and prior. Microsoft Windows Vista

• http://osvdb.org/36935
• http://secunia.com/advisories/26757
• http://securitytracker.com/alerts/2007/Sep/1018678.html
• http://www.microsoft.com/technet/security/bulletin/ms07-053.mspx

---

Updated on 2015-03-25