PT-2002-1121 · Microsoft · Windows Nt+1

Publicado 2002-03-08 · Atualizado 2018-10-12 · CVE-2002-0018

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT and Windows 2000 (affected versions not specified)

Description The issue concerns a trusting domain that receives authorization information from a trusted domain without verifying the trusted domain's authority for all listed SIDs. This allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0018

Produtos afetados

Windows 2000

Windows Nt

Referências · 6

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A64 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0018 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-001 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A159 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8023 · Nota
• http://securityfocus.com/bid/3997 · Nota