CVE

Id
13356  
CVE No.
CVE-2005-2150  
Status
Candidate  
Description
Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl or (2) read eventlogs via eventlog.  
Phase
Assigned (20050706)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
96744 13356 CVE-2005-2150 BUGTRAQ:20050707 NULL sessions vulnerabilities using alternate named pipes  View
96745 13356 CVE-2005-2150 URL:http://marc.info/?l=bugtraq&m=112076409813099&w=2  View
96746 13356 CVE-2005-2150 MISC:http://www.hsc.fr/ressources/presentations/null_sessions/  View
96747 13356 CVE-2005-2150 BID:14177  View
96748 13356 CVE-2005-2150 URL:http://www.securityfocus.com/bid/14177  View
96749 13356 CVE-2005-2150 BID:14178  View
96750 13356 CVE-2005-2150 URL:http://www.securityfocus.com/bid/14178  View
96751 13356 CVE-2005-2150 SECTRACK:1014417  View
96752 13356 CVE-2005-2150 URL:http://securitytracker.com/id?1014417  View
96753 13356 CVE-2005-2150 SECUNIA:14189  View
96754 13356 CVE-2005-2150 URL:http://secunia.com/advisories/14189  View
96755 13356 CVE-2005-2150 XF:win-name-pipe-null-information-disclosure(21286)  View
96756 13356 CVE-2005-2150 URL:http://xforce.iss.net/xforce/xfdb/21286  View
96757 13356 CVE-2005-2150 XF:win-pipe-null-eventlog-information-disclosure(21288)  View

Related JVN