PT-2001-2026 · Microsoft · Windows 2000+2

Publicado 2001-12-06 · Atualizado 2017-10-10 · CVE-2001-0860

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 2000 and XP (affected versions not specified)

Description The issue concerns the Terminal Services Manager MMC, which trusts the Client Address (IP address) provided by the client instead of obtaining it from the packet headers. This allows clients to spoof their public IP address, for example, through a Network Address Translation (NAT).

Recommendations For Windows 2000 and XP, consider restricting access to the Terminal Services Manager MMC to minimize the risk of IP address spoofing. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-0860

Produtos afetados

Terminal Services Manager Mmc

Windows 2000

Windows Xp

Referências · 4

• http://securityfocus.com/bid/3541 · Nota
• http://marc.info/?l=bugtraq&m=100578220002083&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0860 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7538 · Nota