PT-2001-2370 · Microsoft · Windows 2000

Published 2001-07-16 · Updated 2024-02-02 · CVE-2001-1238

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 2000

Description The issue concerns the Task Manager in Windows 2000, which does not allow local users to end certain processes via the Process tab. Specifically, processes with uppercase letters in their names, such as winlogon.exe, csrss.exe, smss.exe, and services.exe, cannot be terminated. This limitation could enable local users to install Trojan horses that cannot be stopped using the Task Manager.

Recommendations For Windows 2000, consider restricting access to the Task Manager or implementing additional security measures to prevent the installation of malicious software. As a temporary workaround, consider monitoring system processes closely to detect and manually terminate any suspicious activity. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-178

Related Identifiers

CVE-2001-1238

Affected Products

Windows 2000

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-1238 · Security Note
• http://securityfocus.com/bid/3033 · Vendor Advisory
• http://securityfocus.com/archive/1/197195 · Vendor Advisory
• https://t.me/cvenotify/69673 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6919 · Note