Microsoft Windows 2000 Telnet Service privileges management

Summaryinfo

A vulnerability was found in Microsoft Windows 2000. It has been declared as problematic. This affects an unknown function of the component Telnet Service. The manipulation results in privileges management. This vulnerability was named CVE-2001-0350. The attack needs to be approached locally. There is no available exploit. A patch should be applied to remediate this issue.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Microsoft Windows 2000 (Operating System). Affected is some unknown processing of the component Telnet Service. The manipulation with an unknown input leads to a privileges management vulnerability. CWE is classifying the issue as CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of this vulnerability.

The issue has been introduced in 02/17/2000. The weakness was presented 07/21/2001 with Microsoft as MS01-031 as confirmed bulletin (Technet). The advisory is available at microsoft.com. This vulnerability is traded as CVE-2001-0350. The exploitability is told to be easy. Local access is required to approach this attack. Required for exploitation is a authentication. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1068 by the MITRE ATT&CK project.

The vulnerability was handled as a non-public zero-day exploit for at least 520 days. During that time the estimated underground price was around $5k-$25k.

Applying the patch MS01-031 is able to eliminate this problem. The bugfix is ready for download at microsoft.com.

The vulnerability is also documented in the databases at X-Force (6664), SecurityFocus (BID 2849†) and Vulnerability Center (SBV-3141†). See VDB-17053, VDB-17054, VDB-17055 and VDB-17056 for similar entries. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Operating System

Vendor

• Microsoft

Name

• Windows

Version

• 2000

License

• commercial

Website

• Vendor: https://www.microsoft.com/
• Product: https://www.microsoft.com/en-us/windows

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion