PT-2001-1570 · Microsoft · Teleservice+1

Published 2001-07-21 · Updated 2018-10-12 · CVE-2001-0347

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000

Description The issue allows remote attackers to determine the existence of user accounts, such as Guest, or log in to the server without specifying the domain name, via a malformed userid. This can be achieved by exploiting the information disclosure vulnerability in the telnet service.

Recommendations For Microsoft Windows 2000, consider restricting access to the telnet service until a fix is available. As a temporary workaround, avoid using the telnet service for remote logins.

Fix

Related Identifiers

CVE-2001-0347

Affected Products

Windows 2000

Teleservice

References · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0347 · Security Note
• http://osvdb.org/5686 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6665 · Note
• http://ciac.org/ciac/bulletins/l-092.shtml · Note
• http://securityfocus.com/bid/2847 · Note