PT-2001-1592 · Microsoft · Windows 2000+2

Publicado 2001-06-18 · Atualizado 2017-10-10 · CVE-2001-0373

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows NT and Windows 2000

Description The default configuration of the Dr. Watson program generates user.dmp crash dump files with world-readable permissions. This could allow a local user to gain access to sensitive information.

Recommendations For Windows NT and Windows 2000, consider changing the permissions of the user.dmp crash dump files to restrict access to sensitive information. As a temporary workaround, restrict access to the directory where the crash dump files are stored to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-0373

Produtos afetados

Dr. Watson

Windows 2000

Windows Nt

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-0373 · Nota de Segurança
• http://osvdb.org/5683 · Nota
• http://securityfocus.com/bid/2501 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6275 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2001-03/0336.html · Nota