Microsoft Windows 2000 Station privileges management

Summaryinfo

A vulnerability was found in Microsoft Windows 2000. It has been classified as problematic. The impacted element is an unknown function of the component Station Handler. The manipulation leads to privileges management. This vulnerability is documented as CVE-2000-0475. The attack needs to be performed locally. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Microsoft Windows 2000 (Operating System). This issue affects an unknown code block of the component Station Handler. The manipulation with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Windows 2000 allows a local user process to access another user s desktop within the same windows station, aka the "Desktop Separation" vulnerability.

The issue has been introduced in 02/17/2000. The weakness was released 06/15/2000 with Microsoft as MS00-020 as confirmed bulletin (Technet). It is possible to read the advisory at microsoft.com. The identification of this vulnerability is CVE-2000-0475. The exploitation is known to be easy. Attacking locally is a requirement. The requirement for exploitation is a simple authentication. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 119 days. During that time the estimated underground price was around $5k-$25k.

Upgrading eliminates this vulnerability. Applying the patch MS00-020 is able to eliminate this problem. The bugfix is ready for download at microsoft.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at X-Force (4714), SecurityFocus (BID 1350†) and Vulnerability Center (SBV-807†). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Microsoft

Name

• Windows

Version

• 2000

License

• commercial

Website

• Vendor: https://www.microsoft.com/
• Product: https://www.microsoft.com/en-us/windows

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion