CVE-2000-0222: Critical severity Microsoft Windows 2000 vulnerability
The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
Reboot the Windows 2000 system after installation to activate the Administrator password and prevent unauthenticated connections to the ADMIN$ share.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0222?
CVE-2000-0222 is considered a critical vulnerability due to the risk of unauthorized access to the ADMIN$ share without a password until the system reboot.
How do I fix CVE-2000-0222?
To mitigate CVE-2000-0222, ensure that the Windows 2000 system is rebooted after installation to activate the Administrator password.
Who is affected by CVE-2000-0222?
CVE-2000-0222 affects all installations of Microsoft Windows 2000 that have not yet been rebooted post-installation.
What are the potential consequences of exploiting CVE-2000-0222?
Exploiting CVE-2000-0222 could allow remote attackers to access privileged shares and potentially gain control over the affected Windows 2000 system.
Is there a workaround for CVE-2000-0222?
A simple workaround for CVE-2000-0222 is to set a strong Administrator password before rebooting the system after installation.