CVE-2000-0155: Code Injection
Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable Autorun so Windows NT does not execute autorun.inf files on non-removable (fixed) drives.
Windows NT Autorun execute autorun.inf on non-removable media = disabled - Configuration
Disable Autorun so Windows 9x does not execute autorun.inf files on non-removable (fixed) drives.
Windows 9x Autorun execute autorun.inf on non-removable media = disabled - Compensating control
Restrict write access to non-removable drives to trusted users (apply file system permissions or other access controls) to prevent untrusted users from placing autorun.inf files.
- Operational
Search non-removable drives for autorun.inf files and remove or inspect any that specify alternate programs; remediate or remove unauthorized autorun.inf files.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0155?
CVE-2000-0155 is considered a moderate severity vulnerability due to the potential for local attack exploitation.
How do I fix CVE-2000-0155?
To remediate CVE-2000-0155, disable autorun functionality or restrict write permissions on non-removable media.
Which systems are affected by CVE-2000-0155?
CVE-2000-0155 affects Windows NT 4.0, Windows 95, and Windows 98 operating systems.
What type of attack does CVE-2000-0155 enable?
CVE-2000-0155 allows local attackers to execute a program of their choosing via the autorun.inf file.
Is CVE-2000-0155 remote or local vulnerability?
CVE-2000-0155 is a local vulnerability that requires physical access to the system.