PT-2002-2218 · Microsoft · Windows Xp+1

Publicado 2002-12-23 · Atualizado 2019-04-30 · CVE-2002-1256

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 through XP

Description: The issue concerns the SMB signing capability in the Server Message Block (SMB) protocol, which allows attackers to disable digital signing settings in an SMB session. This enables them to inject data into the session without detection, potentially by modifying group policy information sent from a domain controller.

Recommendations: For Microsoft Windows 2000 and Windows XP, consider disabling the SMB signing capability as a temporary workaround until a patch is available. Restrict access to the SMB protocol to minimize the risk of exploitation. Avoid using the SMB protocol for sensitive data transmission until the issue is resolved.

Correção

Identificadores relacionados

CVE-2002-1256

Produtos afetados

Windows 2000

Windows Xp

Referências · 5

• http://securityfocus.com/bid/6367 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A277 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1256 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-070 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10843 · Nota