CVE-2001-0045: Critical severity Microsoft Windows NT vulnerability

Published Feb 2, 2001

Updated

The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities.

Affected Software

2 affected components

Microsoft Windows NT=4.0

Microsoft Windows NT=terminal_server

Remediation

Patch Available

http://www.securityfocus.com/bid/2064

Event History

Feb 2, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0045?

CVE-2001-0045 is considered a high severity vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2001-0045?

To fix CVE-2001-0045, adjust the permissions on the RAS Administration key to restrict access only to trusted users.

Who is affected by CVE-2001-0045?

CVE-2001-0045 affects users of Microsoft Windows NT 4.0 and Terminal Server editions due to their default registry settings.

What type of vulnerability is CVE-2001-0045?

CVE-2001-0045 is a registry permissions vulnerability that allows local users to execute unauthorized commands.

Can CVE-2001-0045 be exploited remotely?

No, CVE-2001-0045 requires local access to the affected system to exploit the vulnerability.