PT-2001-1570 · Microsoft · Teleservice+1

Publicado 2001-07-21 · Atualizado 2018-10-12 · CVE-2001-0347

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000

Description The issue allows remote attackers to determine the existence of user accounts, such as Guest, or log in to the server without specifying the domain name, via a malformed userid. This can be achieved by exploiting the information disclosure vulnerability in the telnet service.

Recommendations For Microsoft Windows 2000, consider restricting access to the telnet service until a fix is available. As a temporary workaround, avoid using the telnet service for remote logins.

Correção

Identificadores relacionados

CVE-2001-0347

Produtos afetados

Windows 2000

Teleservice

Referências · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031 · Aviso do Fabricante
• http://osvdb.org/5686 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6665 · Nota
• http://ciac.org/ciac/bulletins/l-092.shtml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0347 · Nota de Segurança
• http://securityfocus.com/bid/2847 · Nota