PT-2001-2026 · Microsoft · Windows 2000+2

Published 2001-12-06 · Updated 2017-10-10 · CVE-2001-0860

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 2000 and XP (affected versions not specified)

Description The issue concerns the Terminal Services Manager MMC, which trusts the Client Address (IP address) provided by the client instead of obtaining it from the packet headers. This allows clients to spoof their public IP address, for example, through a Network Address Translation (NAT).

Recommendations For Windows 2000 and XP, consider restricting access to the Terminal Services Manager MMC to minimize the risk of IP address spoofing. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-0860

Affected Products

Terminal Services Manager Mmc

Windows 2000

Windows Xp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-0860 · Security Note
• http://securityfocus.com/bid/3541 · Note
• http://marc.info/?l=bugtraq&m=100578220002083&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7538 · Note