PT-2001-1568 · Microsoft · Windows 2000+1

Published 2001-07-21 · Updated 2018-10-12 · CVE-2001-0345

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000

Description The issue allows attackers to cause a denial of service by creating a large number of idle Telnet sessions, which prevents them from timing out.

Recommendations For Microsoft Windows 2000, consider restricting access to the Telnet service to minimize the risk of exploitation. As a temporary workaround, limit the number of concurrent Telnet sessions to prevent abuse.

Fix

Related Identifiers

CVE-2001-0345

Affected Products

Windows 2000

Telnet

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-0345 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031 · Vendor Advisory
• http://securityfocus.com/bid/2843 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6667 · Note