Lucene search
HistoryMar 22, 2000 - 5:00 a.m.
CVE-2000-0197
windows nt
local user
privileges
trojan horse
batch files
cve-2000-0197
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
31.1%
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
Affected configurations
Node
microsoftwindows_ntMatch4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_nt | microsoft windows nt | eq | 4.0 |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
31.1%
Related for CVE-2000-0197