CVE-2000-0331: Buffer Overflow
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Restrict execution of cmd.exe to trusted/administrative accounts (for example, by tightening file ACLs on %SystemRoot%\system32\cmd.exe or using Group Policy) so unprivileged local users cannot invoke CMD.EXE and exploit the vulnerability.
Microsoft Windows (cmd.exe) execute_permission = restricted to administrators - Compensating control
Prevent untrusted or unnecessary local logons to affected systems (Windows NT and Windows 2000). Enforce strict local logon restrictions, disable or remove unneeded accounts, and use host-based access controls or central policy to limit interactive/logon access to trusted administrators only.
- Operational
Monitor vendor (Microsoft) advisories for this issue and apply any supplied patches or fixes as soon as they become available. In the meantime, audit hosts for unexpected use of CMD.EXE and review system crash/DoS indicators to detect exploitation attempts.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0331?
CVE-2000-0331 has a severity rating that indicates it can lead to denial of service due to potential system instability.
Who is affected by CVE-2000-0331?
CVE-2000-0331 affects local users of Microsoft Windows 2000 and Windows NT 4.0.
How do I fix CVE-2000-0331?
To mitigate CVE-2000-0331, it is recommended to apply the latest security patches provided by Microsoft for the affected operating systems.
Can CVE-2000-0331 be exploited remotely?
CVE-2000-0331 cannot be exploited remotely as it requires local access to the system.
What symptoms may indicate an issue related to CVE-2000-0331?
Symptoms of CVE-2000-0331 may include system crashes or unresponsive behavior when large environment variables are processed.