PT-2001-1283 · Microsoft · Transaction Server+1

Publicado 2001-02-02 · Atualizado 2018-10-12 · CVE-2001-0047

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Windows NT 4.0

Description: The issue concerns the default permissions for the MTS Package Administration registry key, which allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages. This could potentially lead to privilege escalation.

Recommendations: For Windows NT 4.0, consider restricting access to the MTS Package Administration registry key to prevent local users from installing or modifying arbitrary MTS packages. As a temporary workaround, restrict privileges for local users to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-0047

Produtos afetados

Transaction Server

Windows Nt 4.0

Referências · 5

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5673 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0047 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A140 · Nota
• http://securityfocus.com/bid/2065 · Nota