Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2010-0231
HistoryFeb 10, 2010 - 6:30 p.m.

CVE-2010-0231

2010-02-1018:30:01
CWE-264
CWE-310
microsoft
web.nvd.nist.gov
99
smb
windows
microsoft
cve-2010-0231
security vulnerability
authentication
ntlm

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9

Confidence

High

EPSS

0.962

Percentile

99.6%

JSON

The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain “duplicate values,” and spoofing of an authentication token, aka “SMB NTLM Authentication Lack of Entropy Vulnerability.”

Affected configurations

Nvd
Node
microsoftwindows_2000sp4
OR
microsoftwindows_2003_serversp2
OR
microsoftwindows_2003_serversp2itanium
OR
microsoftwindows_2003_serverMatch-sp2x64
OR
microsoftwindows_7Match-
OR
microsoftwindows_server_2008itanium
OR
microsoftwindows_server_2008x32
OR
microsoftwindows_server_2008x64
OR
microsoftwindows_server_2008r2itanium
OR
microsoftwindows_server_2008r2x64
OR
microsoftwindows_server_2008sp2x32
OR
microsoftwindows_server_2008sp2x64
OR
microsoftwindows_server_2008Match-sp2itanium
OR
microsoftwindows_vista
OR
microsoftwindows_vistax64
OR
microsoftwindows_vistasp1
OR
microsoftwindows_vistasp2
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp2pro_x64
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64
VendorProductVersionCPE
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
microsoftwindows_2003_server-cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*
Rows per page:
1-10 of 211

Related

packetstorm 1
securityvulns 3
exploitpack 1
checkpoint_advisories 2
nvd 2
zdt 1
cvelist 2
exploitdb 1
prion 2
seebug 1
cve 1
openvas 4
nessus 3
threatpost 1
packetstorm
packetstorm
Windows SMB NTLM Authentication Weak Nonce
2010-02-10 00:00:00
securityvulns
securityvulns
[Full-disclosure] Windows SMB NTLM Authentication Weak Nonce Vulnerability
2010-02-10 00:00:00
Microsoft Security Bulletin MS10-012 - Important Vulnerabilities in SMB Server Could Allow Remote Code Execution (971468)
2010-02-10 00:00:00
Microsoft Windows SMB server multiple security vulnerabilities
2010-02-10 00:00:00
exploitpack
exploitpack
Microsoft Windows - NTLM Weak Nonce (MS10-012)
2010-10-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft SMB NTLM Authentication Lack of Entropy (MS10-012; CVE-2010-0231)
2010-02-09 00:00:00
Microsoft Windows Information Disclosure (CVE-2010-0231) - Ver2
2018-06-28 00:00:00
nvd
nvd
CVE-2010-0231
2010-02-10 18:30:01
CVE-2016-0917
2016-09-21 02:59:05
zdt
zdt
Windows NTLM Weak Nonce Vulnerability
2010-10-18 00:00:00
cvelist
cvelist
CVE-2010-0231
2010-02-10 18:00:00
CVE-2016-0917
2016-09-21 01:00:00
exploitdb
exploitdb
Microsoft Windows - NTLM Weak Nonce (MS10-012)
2010-10-17 00:00:00
prion
prion
Authentication flaw
2010-02-10 18:30:00
Authentication flaw
2016-09-21 02:59:00
seebug
seebug
Windows NTLM Weak Nonce Vulnerability
2014-07-01 00:00:00
cve
cve
CVE-2016-0917
2016-09-21 02:59:05
openvas
openvas
Microsoft Windows SMB Server NTLM Multiple Vulnerabilities (971468)
2010-10-22 00:00:00
Microsoft Windows SMB Server NTLM Multiple Vulnerabilities (971468)
2010-10-22 00:00:00
Microsoft Windows SMB Server Multiple Vulnerabilities (971468)
2010-02-10 00:00:00
nessus
nessus
MS10-012: Vulnerabilities in SMB Could Allow Remote Code Execution (971468) (uncredentialed check)
2010-09-13 00:00:00
MS10-012: Vulnerabilities in SMB Could Allow Remote Code Execution (971468)
2010-02-09 00:00:00
Windows Server 2008 Critical RCE Vulnerabilities (uncredentialed) (PCI/DSS)
2018-04-03 00:00:00
threatpost
threatpost
MS Patch Tuesday: 13 Bulletins, 26 Vulnerabilities
2010-02-09 19:33:53

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9

Confidence

High

EPSS

0.962

Percentile

99.6%

JSON
Related for CVE-2010-0231
packetstorm1securityvulns3exploitpack1checkpoint_advisories2nvd2zdt1cvelist2exploitdb1prion2seebug1cve1openvas4nessus3threatpost1