Overview
A vulnerability exists in the Microsoft Windows 2000 Service Control Manager which could allow local users to gain control of the system.
Description
A vulnerability exists in the Service Control Manager (SCM) function. This function creates named pipes for system services. More information on this problem is available from Microsoft at: http://www.microsoft.com/technet/security/bulletin/ms00-053.asp |
Impact
An attacker can execute code with the privileges of any other user on the machine, including the administrator or the system itself. |
Solution
Apply the patch described in http://www.microsoft.com/Downloads/Release.asp?ReleaseID=23432 |
Vendor Information
31607
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Our thanks to Microsoft for the information contained in their bulletin.
This document was written by Ian A. Finlay.
Other Information
| CVE IDs: | CVE-2000-0737 |
| Severity Metric: | 8.66 |
| Date Public: | 2000-08-02 |
| Date First Published: | 2001-05-09 |
| Date Last Updated: | 2001-05-10 13:44 UTC |
| Document Revision: | 14 |