Lucene search
HistoryMar 09, 2002 - 5:00 a.m.
CVE-2001-0860
windows 2000
xp
spoofing
nat
terminal services manager
cybersecurity
client spoofing
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.704 High
EPSS
Percentile
98.0%
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation (NAT).
Affected configurations
Node
microsoftwindows_2000
ORmicrosoftwindows_xpgold
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_2000 | microsoft windows 2000 | eq | * |
| microsoft:windows_xp | microsoft windows xp | eq | * |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.704 High
EPSS
Percentile
98.0%
Related for CVE-2001-0860