PT-2001-2604 · Microsoft · Windows 2000

Published 2001-12-31 · Updated 2024-08-08 · CVE-2001-1519

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Windows 2000

Description The issue allows local users to create a spoofed named pipe when the RunAs service is stopped, then capture cleartext usernames and passwords when clients connect to the service. The vendor disputes this issue, saying that administrative privileges are already required to exploit it.

Recommendations For Windows 2000, consider restricting access to the RunAs service to minimize the risk of exploitation. As a temporary workaround, consider disabling the RunAs service until a resolution is available.

Exploit

Fix

Related Identifiers

CVE-2001-1519

Affected Products

Windows 2000

References · 9

• 🔥 https://exploit-db.com/exploits/21069 · Exploit
• 🔥 http://securityfocus.com/bid/3185 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1519 · Security Note
• https://t.me/cvenotify/76344 · Telegram Post
• http://iss.net/security_center/static/7532.php · Note
• https://t.me/cvenotify/80117 · Telegram Post
• https://t.me/cvenotify/89871 · Telegram Post
• http://online.securityfocus.com/archive/1/236111 · Note
• http://online.securityfocus.com/archive/1/240136 · Note