Microsoft Windows 2000 Terminal Services Named Pipe System Account Access Vulnerability
BID:8098
Info
Microsoft Windows 2000 Terminal Services Named Pipe System Account Access Vulnerability
| Bugtraq ID: | 8098 |
| Class: | Unknown |
| CVE: | |
| Remote: | Unknown |
| Local: | Unknown |
| Published: | Jun 26 2003 12:00AM |
| Updated: | Jun 26 2003 12:00AM |
| Credit: | This vulnerability was announced by the vendor. |
| Vulnerable: |
Microsoft Windows 2000 Terminal Services SP3 Microsoft Windows 2000 Terminal Services SP2 Microsoft Windows 2000 Terminal Services SP1 Microsoft Windows 2000 Terminal Services |
| Not Vulnerable: |
Microsoft Windows 2000 Terminal Services SP4 |
Discussion
Microsoft Windows 2000 Terminal Services Named Pipe System Account Access Vulnerability
It has been reported that Microsoft Windows does not properly handle named pipes with Terminal Services. Because of this, an attacker may be able to gain access to the SYSTEM account.
This issue was announced with the release of Microsoft Windows 2000 SP4. BID 8045 was sent out to acknowledge the release of this service pack and the announcement of a number of new vulnerabilities. Analysis of these issues is completed and each of the issues is now being assigned its own BID.
It has been reported that Microsoft Windows does not properly handle named pipes with Terminal Services. Because of this, an attacker may be able to gain access to the SYSTEM account.
This issue was announced with the release of Microsoft Windows 2000 SP4. BID 8045 was sent out to acknowledge the release of this service pack and the announcement of a number of new vulnerabilities. Analysis of these issues is completed and each of the issues is now being assigned its own BID.
Exploit / POC
Microsoft Windows 2000 Terminal Services Named Pipe System Account Access Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Microsoft Windows 2000 Terminal Services Named Pipe System Account Access Vulnerability
Solution:
This issue has been addressed in Windows 2000 Service Pack 4.
Microsoft Windows 2000 Terminal Services SP1
Microsoft Windows 2000 Terminal Services SP3
Microsoft Windows 2000 Terminal Services
Microsoft Windows 2000 Terminal Services SP2
Solution:
This issue has been addressed in Windows 2000 Service Pack 4.
Microsoft Windows 2000 Terminal Services SP1
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
Microsoft Windows 2000 Terminal Services SP3
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
Microsoft Windows 2000 Terminal Services
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
Microsoft Windows 2000 Terminal Services SP2
-
Microsoft Windows 2000 SP4
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/defaul t.asp
References
Microsoft Windows 2000 Terminal Services Named Pipe System Account Access Vulnerability
References:
References:
- Windows 2000 Service Pack 4 (Microsoft)