PT-2000-1757 · Microsoft · Windows 2000

Publicado 2000-11-14 · Atualizado 2018-10-12 · CVE-2000-0834

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 2000

Description The issue concerns the Windows 2000 telnet client, which attempts to perform NTLM authentication by default. This allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to a malicious server.

Recommendations For Windows 2000, consider disabling NTLM authentication for the telnet client as a temporary workaround until a patch is available. Restrict access to telnet services to minimize the risk of exploitation. Avoid using the telnet client to connect to untrusted servers until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2000-0834

Produtos afetados

Windows 2000

Referências · 6

• 🔥 https://exploit-db.com/exploits/20222 · Exploit
• 🔥 http://securityfocus.com/bid/1683 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5242 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-067 · Nota
• http://atstake.com/research/advisories/2000/a091400-1.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0834 · Nota de Segurança