PT-2002-2471 · Microsoft · Windows 2000 Terminal Service

Publicado 2002-12-31 · Atualizado 2019-04-30 · CVE-2002-1749

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows 2000 Terminal Services (affected versions not specified)

Description The issue concerns a scenario where Windows 2000 Terminal Services, when using the disconnect feature of the client, fails to properly lock itself if left idle until the screen saver activates and the user disconnects. This could potentially allow attackers to gain administrator privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-1749

Produtos afetados

Windows 2000 Terminal Service

Referências · 4

• http://securityfocus.com/bid/4095 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1749 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8199 · Nota
• http://ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0202&L=ntbugtraq&T=0&O=D&F=N&P=5224 · Aviso do Fabricante