CVE-2005-2150: Medium severity Microsoft Windows NT vulnerability
Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl or (2) read eventlogs via eventlog.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2150?
CVE-2005-2150 is considered a high severity vulnerability due to its potential for unauthorized access to sensitive system information.
How do I fix CVE-2005-2150?
To remediate CVE-2005-2150, apply the latest security patches available for Windows 2000 SP4 and Windows NT 4.0.
What systems are affected by CVE-2005-2150?
CVE-2005-2150 affects Windows NT 4.0 and Windows 2000 operating systems prior to URP1 for Windows 2000 SP4.
What are the potential impacts of CVE-2005-2150?
The vulnerability can allow remote attackers to list Windows services or read event logs, which can aid in further exploitation.
Is CVE-2005-2150 still a concern today?
While CVE-2005-2150 is old, it remains a concern for legacy systems still in use, which can expose organizations to security risks.