PT-2000-1241 · Microsoft · Windows Nt 4.0

Publicado 2000-04-12 · Atualizado 2018-10-12 · CVE-2000-0259

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows NT 4.0

Description The issue concerns the default permissions for the CryptographyOffload registry key in Windows NT 4.0, which allows local users to compromise the cryptographic keys of other users. This could potentially lead to unauthorized access to sensitive information.

Recommendations For Windows NT 4.0, consider restricting access to the CryptographyOffload registry key to prevent local users from compromising the cryptographic keys of other users. As a temporary workaround, restrict permissions on this registry key to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2000-0259

Produtos afetados

Windows Nt 4.0

Referências · 3

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-024 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0259 · Nota de Segurança
• http://securityfocus.com/bid/1105 · Aviso do Fabricante