CVE-2002-1230: Medium severity Microsoft Windows 2000 Terminal Services vulnerability

Published Nov 4, 2002

Updated

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WMCOPYDATA message followed by a WMTIMER message, as demonstrated by GetAd, aka "Flaw in Windows WMTIMER Message Handling Could Enable Privilege Elevation."

Affected Software

8 affected components

Microsoft Windows 2000 Terminal Services=sp1

Microsoft Windows 2000

Microsoft Windows 2000=sp2

Microsoft Windows 2000 Terminal Services=sp3

Microsoft Windows 2000=sp1

Microsoft Windows 2000 Terminal Services

Microsoft Windows 2000 Terminal Services=sp2

Microsoft Windows 2000=sp3

Event History

Nov 4, 2002

CVE Published

05:00 AM

Sep 1, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1230?

CVE-2002-1230 has a high severity rating due to its ability to allow local users to execute arbitrary code as LocalSystem.

How do I fix CVE-2002-1230?

To fix CVE-2002-1230, ensure that you apply the latest security updates from Microsoft for the affected Windows versions.

What systems are vulnerable to CVE-2002-1230?

CVE-2002-1230 affects Windows NT 4.0, Windows 2000, and Windows XP, specifically with their respective service packs.

What type of attack is associated with CVE-2002-1230?

CVE-2002-1230 is associated with a 'shatter' style attack that exploits message handling in the Windows operating system.

Can remote users exploit CVE-2002-1230?

No, CVE-2002-1230 can only be exploited by local users with access to the system.