Microsoft Windows 2000 Install Unprotected ADMIN$ Share Vulnerability
BID:990
Info
Microsoft Windows 2000 Install Unprotected ADMIN$ Share Vulnerability
| Bugtraq ID: | 990 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Feb 15 2000 12:00AM |
| Updated: | Feb 15 2000 12:00AM |
| Credit: | Posted to Bugtraq on February 15, 2000 by Stephane Aubert <[email protected]>. |
| Vulnerable: |
Microsoft Windows 2000 Server Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server |
| Not Vulnerable: | |
Discussion
Microsoft Windows 2000 Install Unprotected ADMIN$ Share Vulnerability
During the install procedure for Windows 2000, the ADMIN$ share is created. However, the Administrator password, although entered, is not activated until after the next reboot. Therefore, during this period of time it is possible for anyone with network access to the machine to connect to the share as Administrator with no password.
During the install procedure for Windows 2000, the ADMIN$ share is created. However, the Administrator password, although entered, is not activated until after the next reboot. Therefore, during this period of time it is possible for anyone with network access to the machine to connect to the share as Administrator with no password.
Exploit / POC
Microsoft Windows 2000 Install Unprotected ADMIN$ Share Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Microsoft Windows 2000 Install Unprotected ADMIN$ Share Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Microsoft Windows 2000 Install Unprotected ADMIN$ Share Vulnerability
References:
References: