CVE

Id
4317  
CVE No.
CVE-2001-1517  
Status
Candidate  
Description
** DISPUTED ** RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it, and the original researcher did not respond to requests for additional information.  
Phase
Assigned (20050714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
20651 4317 CVE-2001-1517 VULNWATCH:20011112 RADIX1112200102  View
20652 4317 CVE-2001-1517 URL:http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0041.html  View
20653 4317 CVE-2001-1517 BUGTRAQ:20011114 RE:Radix Research Reports RADIX1112200101, RADIX1112200102, and RADIX1112200103  View
20654 4317 CVE-2001-1517 URL:http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00100.html  View
20655 4317 CVE-2001-1517 BID:3184  View
20656 4317 CVE-2001-1517 URL:http://www.securityfocus.com/bid/3184  View
20657 4317 CVE-2001-1517 XF:win2k-runas-reveal-information(7531)  View

Related JVN