Microsoft Windows 2000 Default 40-bit Encrypted Protected Store Vulnerability
BID:1295
Info
Microsoft Windows 2000 Default 40-bit Encrypted Protected Store Vulnerability
| Bugtraq ID: | 1295 |
| Class: | Design Error |
| CVE: |
CVE-2000-0487 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 01 2000 12:00AM |
| Updated: | Jul 12 2009 05:56PM |
| Credit: | Publicized in a Microsoft Security Bulletin (MS00-032) on June 1, 2000. |
| Vulnerable: |
Microsoft Windows 2000 Server Microsoft Windows 2000 Professional Microsoft Windows 2000 Advanced Server |
| Not Vulnerable: | |
Discussion
Microsoft Windows 2000 Default 40-bit Encrypted Protected Store Vulnerability
Windows 2000 Protected Store uses a default 40-bit encryption instead of utilizing the stronger 56-bit DES encryption that it is shipped with, or 168-bit Triple DES (if Windows 2000 has been upgraded using the High Encryption Pack). A remote or local user who posesses full administrative rights can use decryption utilities against the weakly encrypted Protected Store in order to obtain user private keys.
Windows 2000 Protected Store uses a default 40-bit encryption instead of utilizing the stronger 56-bit DES encryption that it is shipped with, or 168-bit Triple DES (if Windows 2000 has been upgraded using the High Encryption Pack). A remote or local user who posesses full administrative rights can use decryption utilities against the weakly encrypted Protected Store in order to obtain user private keys.
Exploit / POC
Microsoft Windows 2000 Default 40-bit Encrypted Protected Store Vulnerability
see discussion
see discussion
Solution / Fix
Microsoft Windows 2000 Default 40-bit Encrypted Protected Store Vulnerability
Solution:
Microsoft has released the following patch which rectifies this vulnerability. It was originally released on June 1. Microsoft released an updated patch on July 26 in order to fix a regression error :
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Server
Solution:
Microsoft has released the following patch which rectifies this vulnerability. It was originally released on June 1. Microsoft released an updated patch on July 26 in order to fix a regression error :
Microsoft Windows 2000 Professional
-
Microsoft Q260219
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=23332
Microsoft Windows 2000 Advanced Server
-
Microsoft Q260219
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=23332
Microsoft Windows 2000 Server
-
Microsoft Q260219
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=23332
References
Microsoft Windows 2000 Default 40-bit Encrypted Protected Store Vulnerability
References:
References: