Lucene search

[email protected]CVE-2001-0016

HistoryMar 12, 2001 - 5:00 a.m.

CVE-2001-0016

2001-03-1205:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ntlm

security support provider

access control

lpc request

nvd

cve-2001-0016

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.8%

JSON

NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access.

CPENameOperatorVersion
microsoft:windows_ntmicrosoft windows ntle4.0

CPE	Name	Operator	Version
microsoft:windows_nt	microsoft windows nt	le	4.0

References

razor.bindview.com/publish/advisories/adv_NTLMSSP.html

www.securityfocus.com/bid/2348

docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-008

exchange.xforce.ibmcloud.com/vulnerabilities/6076

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.8%

JSON

Related for CVE-2001-0016

nessus1