PT-2002-2218 · Microsoft · Windows Xp+1

Published 2002-12-23 · Updated 2019-04-30 · CVE-2002-1256

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 through XP

Description: The issue concerns the SMB signing capability in the Server Message Block (SMB) protocol, which allows attackers to disable digital signing settings in an SMB session. This enables them to inject data into the session without detection, potentially by modifying group policy information sent from a domain controller.

Recommendations: For Microsoft Windows 2000 and Windows XP, consider disabling the SMB signing capability as a temporary workaround until a patch is available. Restrict access to the SMB protocol to minimize the risk of exploitation. Avoid using the SMB protocol for sensitive data transmission until the issue is resolved.

Fix

Related Identifiers

CVE-2002-1256

Affected Products

Windows 2000

Windows Xp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1256 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-070 · Vendor Advisory
• http://securityfocus.com/bid/6367 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A277 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10843 · Note