PT-2001-1283 · Microsoft · Transaction Server+1

Published 2001-02-02 · Updated 2018-10-12 · CVE-2001-0047

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Windows NT 4.0

Description: The issue concerns the default permissions for the MTS Package Administration registry key, which allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages. This could potentially lead to privilege escalation.

Recommendations: For Windows NT 4.0, consider restricting access to the MTS Package Administration registry key to prevent local users from installing or modifying arbitrary MTS packages. As a temporary workaround, restrict privileges for local users to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-0047

Affected Products

Transaction Server

Windows Nt 4.0

References · 5

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0047 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5673 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A140 · Note
• http://securityfocus.com/bid/2065 · Note