Lucene search

[email protected]CVE-2001-1519

HistoryOct 03, 2022 - 4:22 p.m.

CVE-2001-1519

2022-10-0316:22:34

[email protected]

web.nvd.nist.gov

windows 2000

runas

cve-2001-1519

vulnerability

data capture

local user

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.5%

JSON

RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it

Affected configurations

NVD

Node

microsoftwindows_2000

CPENameOperatorVersion
microsoft:windows_2000microsoft windows 2000eq*

CPE	Name	Operator	Version
microsoft:windows_2000	microsoft windows 2000	eq	*

References

online.securityfocus.com/archive/1/236111

online.securityfocus.com/archive/1/240136

www.iss.net/security_center/static/7532.php

www.securityfocus.com/bid/3185

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.5%

JSON

Related for CVE-2001-1519

cvelist1 nvd1