PT-2000-1361 · Microsoft · Windows 2000

Publicado 2000-05-11 · Atualizado 2008-09-10 · CVE-2000-0420

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows 2000

Description The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry. This could allow an attacker to recover it and use it to decrypt Encrypted File System (EFS) data.

Recommendations For Windows 2000, consider changing the default configuration of SYSKEY to store the startup key in a secure location, such as a floppy disk, to prevent an attacker from recovering it.

Correção

Identificadores relacionados

CVE-2000-0420

Produtos afetados

Windows 2000

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2000-0420 · Nota de Segurança
• http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0112.html · Nota
• http://securityfocus.com/bid/1198 · Nota