PT-2000-1280 · Microsoft · Windows 2000

Published 2000-04-07 · Updated 2017-10-10 · CVE-2000-0298

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows 2000

Description The issue concerns the unattended installation of Windows 2000 with the OEMPreinstall option, which sets insecure permissions for the All Users and Default Users directories.

Recommendations For Windows 2000, manually adjust the permissions for the All Users and Default Users directories to secure them after an unattended installation with the OEMPreinstall option.

Fix

Related Identifiers

CVE-2000-0298

Affected Products

Windows 2000

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-0298 · Security Note
• http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0027.html · Note
• http://securityfocus.com/bid/1758 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/4278 · Note