CVE-2005-2150

Publicada em 11 jul 2005 · Atualizada em 07 ago 2024

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 19%

probabilidade de exploração

19%top 3% das CVEs

exploração observada

nãonenhuma fonte reporta

Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl or (2) read eventlogs via eventlog.

Produtos afetados

n/a · n/a

Referências

http://marc.info/?l=bugtraq&m=112076409813099&w=2 http://secunia.com/advisories/14189 http://securitytracker.com/id?1014417 https://exchange.xforce.ibmcloud.com/vulnerabilities/21286 https://exchange.xforce.ibmcloud.com/vulnerabilities/21288 http://www.hsc.fr/ressources/presentations/null_sessions/http://www.securityfocus.com/bid/14177 http://www.securityfocus.com/bid/14178