PT-2002-1121 · Microsoft · Windows Nt+1

Published 2002-03-08 · Updated 2018-10-12 · CVE-2002-0018

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows NT and Windows 2000 (affected versions not specified)

Description The issue concerns a trusting domain that receives authorization information from a trusted domain without verifying the trusted domain's authority for all listed SIDs. This allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-0018

Affected Products

Windows 2000

Windows Nt

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-0018 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-001 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A64 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A159 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8023 · Note
• http://securityfocus.com/bid/3997 · Note