PT-2001-2600 · Microsoft · Windows 2000 Sp1

CVE-2001-1515 · Published 2001-12-31 · Updated 2024-01-25

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows 2000 SP1

Description The issue arises when Macintosh clients use NT file system volumes on Windows 2000 SP1. In this scenario, the creation of subdirectories automatically modifies the inherited NTFS permissions, potentially resulting in less restrictive permissions than intended.

Recommendations For Windows 2000 SP1, consider manually reviewing and adjusting the NTFS permissions of subdirectories created by Macintosh clients to ensure they align with the intended security settings. As a temporary workaround, restrict access to sensitive directories until a more permanent solution can be implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

CVE-2001-1515

Affected Products

Windows 2000 Sp1

References · 4

• http://securitytracker.com/id?1002626 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1515 · Security Note
• https://t.me/cvenotify/68746 · Telegram Post
• http://securityfocus.com/bid/3479 · Note