PT-2002-2471 · Microsoft · Windows 2000 Terminal Service

Published 2002-12-31 · Updated 2019-04-30 · CVE-2002-1749

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows 2000 Terminal Services (affected versions not specified)

Description The issue concerns a scenario where Windows 2000 Terminal Services, when using the disconnect feature of the client, fails to properly lock itself if left idle until the screen saver activates and the user disconnects. This could potentially allow attackers to gain administrator privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1749

Affected Products

Windows 2000 Terminal Service

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1749 · Security Note
• http://ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0202&L=ntbugtraq&T=0&O=D&F=N&P=5224 · Vendor Advisory
• http://securityfocus.com/bid/4095 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8199 · Note