BID:8104

Microsoft Windows 2000 Unauthorized RPC Connection Weakness

Info

Microsoft Windows 2000 Unauthorized RPC Connection Weakness

Bugtraq ID:	8104
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 26 2003 12:00AM
Updated:	Jun 26 2003 12:00AM
Credit:	This issue was reported by Microsoft with the release of Windows 2000 Service Pack 4.
Vulnerable:	Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server 0 + Avaya S8100 Media Servers 0 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server

Not Vulnerable:	Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Advanced Server SP4

Discussion

Microsoft Windows 2000 Unauthorized RPC Connection Weakness

Microsoft Windows 2000 is prone to an issue that may result in an attacker obtaining unauthorized access to a compromised system.

The issue exists when Internet Explorer is configured with 'Medium-Low' security settings. When configured in such a manner, it may be possible for an attacker to present a dialog to download and install a driver. The malicious driver may then provide a conduit that provides for unauthorized RPC communications.

Solution / Fix

Microsoft Windows 2000 Unauthorized RPC Connection Weakness

Solution:
The vendor has released a service pack to address this and other issues:

Microsoft Windows 2000 Professional