CVE-2001-1238: High severity Microsoft Windows 2000 vulnerability

Published Jul 16, 2001

Updated

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager.

Affected Software

6 affected components

Microsoft Windows 2000

Microsoft Windows 2000=sp1

Microsoft Windows 2000=sp2

Microsoft Windows 2000 Terminal Services

Microsoft Windows 2000 Terminal Services=sp1

Microsoft Windows 2000 Terminal Services=sp2

Remediation

Patch Available

http://www.securityfocus.com/bid/3033

Event History

Jul 16, 2001

CVE Published

via NVD·04:00 AM

May 3, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1238?

CVE-2001-1238 is considered to be a moderate severity vulnerability because it allows local users to potentially install malicious software.

How do I fix CVE-2001-1238?

To mitigate CVE-2001-1238, users should apply the latest patches from Microsoft for Windows 2000.

What types of processes are affected by CVE-2001-1238?

CVE-2001-1238 affects specific critical system processes such as winlogon.exe, csrss.exe, smss.exe, and services.exe.

Which versions of Windows are impacted by CVE-2001-1238?

CVE-2001-1238 affects Windows 2000 and its service packs SP1 and SP2 as well as Windows Terminal Services.

Can CVE-2001-1238 be exploited remotely?

CVE-2001-1238 cannot be exploited remotely as it requires local user access to the system.