CVE-2001-0047: High severity Microsoft Windows NT vulnerability

Published Feb 2, 2001

Updated

The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities.

Affected Software

2 affected components

Microsoft Windows NT=4.0

Microsoft Windows NT=terminal_server

Event History

Feb 2, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0047?

CVE-2001-0047 has been classified as a medium severity vulnerability due to its potential for privilege escalation.

How do I fix CVE-2001-0047?

To fix CVE-2001-0047, ensure that proper permissions are set for the MTS Package Administration registry key to restrict unauthorized access.

Who is affected by CVE-2001-0047?

CVE-2001-0047 affects users of Microsoft Windows NT 4.0 and Windows NT Terminal Server environments.

What type of vulnerability is CVE-2001-0047?

CVE-2001-0047 is classified as a registry permissions vulnerability that allows local users to gain elevated privileges.

Can CVE-2001-0047 be exploited remotely?

CVE-2001-0047 cannot be exploited remotely, as it requires local access to the system.