CVE-2004-2730: Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo be...

Security readout for executives and security teams

Older Sysinternals PsTools can leave privileged remote Windows share connections behind. A local user on the same system may then reuse those existing IPC$ or ADMIN$ mappings, creating an unintended privilege exposure on administrator workstations or jump hosts. Exposure is most plausible where old PsTools binaries are still used on shared administrator systems, helpdesk machines, jump hosts, or servers where multiple local users can log in. Treat this as a legacy tool hygiene and privileged-access control issue. Prioritize shared admin systems first because the business risk depends on who can access machines where the tools run. Mitigation focus: Inventory PsTools binaries and remove versions before PsTools 2.05.; Upgrade listed PsTools components to non-affected versions or current vendor-supported releases.; Restrict local login access on administrator workstations and jump hosts..

Prepared

Jun 29, 2026, 02:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.