Microsoft Windows 2000 Startup Key missing encryption

Summaryinfo

A vulnerability has been found in Microsoft Windows 2000 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Startup Key Handler. Performing a manipulation results in missing encryption. This vulnerability was named CVE-2000-0420. The attack needs to be approached locally. There is no available exploit. Due to its background and reception, this vulnerability has an historic impact. The affected component should be upgraded.

Detailsinfo

A vulnerability classified as critical has been found in Microsoft Windows 2000 (Operating System). This affects an unknown part of the component Startup Key Handler. The manipulation with an unknown input leads to a missing encryption vulnerability. CWE is classifying the issue as CWE-311. The product does not encrypt sensitive or critical information before storage or transmission. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System (EFS) data.

The issue has been introduced in 02/17/2000. The weakness was presented 05/11/2000 as not defined posting (NTBugtraq). It is possible to read the advisory at archives.neohapsis.com. This vulnerability is uniquely identified as CVE-2000-0420. The exploitability is told to be easy. Attacking locally is a requirement. A authentication is necessary for exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 04/21/2026). The attack technique deployed by this issue is T1600 according to MITRE ATT&CK. Due to its background and reception, this vulnerability has a historic impact.

The vulnerability was handled as a non-public zero-day exploit for at least 84 days. During that time the estimated underground price was around $5k-$25k.

Upgrading to version XP or Server 2003 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 1198†). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Microsoft

Name

• Windows

Version

• 2000

License

• commercial

Website

• Vendor: https://www.microsoft.com/
• Product: https://www.microsoft.com/en-us/windows

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion