PT-2001-1592 · Microsoft · Windows 2000+2

Published 2001-06-18 · Updated 2017-10-10 · CVE-2001-0373

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows NT and Windows 2000

Description The default configuration of the Dr. Watson program generates user.dmp crash dump files with world-readable permissions. This could allow a local user to gain access to sensitive information.

Recommendations For Windows NT and Windows 2000, consider changing the permissions of the user.dmp crash dump files to restrict access to sensitive information. As a temporary workaround, restrict access to the directory where the crash dump files are stored to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-0373

Affected Products

Dr. Watson

Windows 2000

Windows Nt

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-0373 · Security Note
• http://securityfocus.com/bid/2501 · Vendor Advisory
• http://osvdb.org/5683 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6275 · Note
• http://archives.neohapsis.com/archives/bugtraq/2001-03/0336.html · Note