CVE-2005-2150
First published: Mon Jul 11 2005(Updated: )
Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl or (2) read eventlogs via eventlog.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows 2000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.hsc.fr/ressources/presentations/null_sessions/
- http://www.securityfocus.com/bid/14177
- http://www.securityfocus.com/bid/14178
- http://securitytracker.com/id?1014417
- http://secunia.com/advisories/14189
- http://marc.info/?l=bugtraq&m=112076409813099&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21288
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21286
Frequently Asked Questions
What is the severity of CVE-2005-2150?
CVE-2005-2150 is considered a high severity vulnerability due to its potential for unauthorized access to sensitive system information.
How do I fix CVE-2005-2150?
To remediate CVE-2005-2150, apply the latest security patches available for Windows 2000 SP4 and Windows NT 4.0.
What systems are affected by CVE-2005-2150?
CVE-2005-2150 affects Windows NT 4.0 and Windows 2000 operating systems prior to URP1 for Windows 2000 SP4.
What are the potential impacts of CVE-2005-2150?
The vulnerability can allow remote attackers to list Windows services or read event logs, which can aid in further exploitation.
Is CVE-2005-2150 still a concern today?
While CVE-2005-2150 is old, it remains a concern for legacy systems still in use, which can expose organizations to security risks.
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft windows nt
- version/microsoft windows nt/4.0
- canonical/microsoft windows 2000