MS Windows 2000 Debug Registers Vulnerability

Bugtraq ID:	2764
Class:	Design Error
CVE:	CVE-2001-1347
Remote:	No
Local:	Yes
Published:	May 24 2001 12:00AM
Updated:	Jul 11 2009 06:06AM
Credit:	Discovered and posted to Bugtraq by Georgi Guninski <[email protected]> on May 24, 2001.
Vulnerable:	Microsoft Windows 2000 Terminal Services SP1 + Microsoft Windows 2000 Advanced Server SP1 + Microsoft Windows 2000 Datacenter Server SP1 + Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Terminal Services + Microsoft Windows 2000 Advanced Server + Microsoft Windows 2000 Datacenter Server + Microsoft Windows 2000 Server Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server 0 + Avaya S8100 Media Servers 0 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server
Not Vulnerable:	Microsoft Windows 2000 Terminal Services SP2 + Microsoft Windows 2000 Advanced Server SP2 + Microsoft Windows 2000 Datacenter Server SP2 + Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Advanced Server SP2

MS Windows 2000 Debug Registers Vulnerability

Georgi Guninski <[email protected]> has provided the following exploit:

http://www.guninski.com/pipe3.cpp