CVE-2000-0259: High severity Microsoft Terminal Server vulnerability
The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify the ACL on the HKLM\Software\Microsoft\Cryptography\Offload (Cryptography\Offload) registry key to remove access for standard/local user accounts. Grant access only to SYSTEM and Administrators to prevent local users from obtaining or altering other users' cryptographic keys.
Windows NT 4.0 Cryptography\Offload registry key (OffloadModExpo) permissions (registry ACL) = remove read/write access for non-privileged local users; allow only SYSTEM and Administrators
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0259?
CVE-2000-0259 is classified as a medium severity vulnerability.
How do I fix CVE-2000-0259?
To fix CVE-2000-0259, modify the permissions of the Cryptography\Offload registry key to restrict access for non-administrative users.
Which versions of Windows are affected by CVE-2000-0259?
CVE-2000-0259 affects Windows NT 4.0 and Microsoft Windows 2000 Terminal Services.
Can CVE-2000-0259 lead to data exposure?
Yes, CVE-2000-0259 may allow local users to access and compromise the cryptographic keys of other users, leading to potential data exposure.
Is CVE-2000-0259 still relevant today?
CVE-2000-0259 is less relevant today as Windows NT 4.0 and its associated services are considered obsolete and unsupported.