CVE-2002-0018: Critical severity Microsoft Windows 2000 vulnerability
In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0018?
CVE-2002-0018 is classified as a critical vulnerability due to the potential for remote attackers to gain Domain Administrator privileges.
How do I fix CVE-2002-0018?
To remediate CVE-2002-0018, ensure that all trusted domains properly authenticate all listed SIDs to prevent unauthorized privilege escalation.
What systems are affected by CVE-2002-0018?
CVE-2002-0018 affects Microsoft Windows NT and Microsoft Windows 2000.
What are the potential impacts of CVE-2002-0018?
The potential impact of CVE-2002-0018 includes unauthorized elevation of privileges to Domain Administrator level, compromising the network security.
Is there a patch available for CVE-2002-0018?
There is no patch available for CVE-2002-0018 since it pertains to outdated operating systems, but review security policies and configurations as mitigation measures.