PT-2005-3082

CVE-2005-2150

·

تاريخ النشر

2005-07-11

·

تاريخ التحديث

2017-07-11

الوصف من

CVSS 2.0
5.0
متوسطة
المقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Windows NT 4.0 Windows 2000 before URP1 for Windows 2000 SP4
Description: The issue allows remote attackers to list Windows services via svcctl or read event logs via eventlog due to improper prevention of NULL sessions from accessing certain alternate named pipes.
Recommendations: For Windows NT 4.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Windows 2000 before URP1 for Windows 2000 SP4, apply the URP1 update for Windows 2000 SP4 to resolve the issue.
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
UNAUTHORIZEDACCESSCHECK
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾