PT-2000-1757 · Microsoft · Windows 2000

Published 2000-11-14 · Updated 2018-10-12 · CVE-2000-0834

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 2000

Description The issue concerns the Windows 2000 telnet client, which attempts to perform NTLM authentication by default. This allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to a malicious server.

Recommendations For Windows 2000, consider disabling NTLM authentication for the telnet client as a temporary workaround until a patch is available. Restrict access to telnet services to minimize the risk of exploitation. Avoid using the telnet client to connect to untrusted servers until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2000-0834

Affected Products

Windows 2000

References · 6

• 🔥 https://exploit-db.com/exploits/20222 · Exploit
• 🔥 http://securityfocus.com/bid/1683 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0834 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5242 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-067 · Note
• http://atstake.com/research/advisories/2000/a091400-1.txt · Note