CVE

Id
4412  
CVE No.
CVE-2002-0018  
Status
Entry  
Description
In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
21214 4412 CVE-2002-0018 MS:MS02-001  View
21215 4412 CVE-2002-0018 URL:http://www.microsoft.com/technet/security/bulletin/MS02-001.asp  View
21216 4412 CVE-2002-0018 BID:3997  View
21217 4412 CVE-2002-0018 URL:http://www.securityfocus.com/bid/3997  View
21218 4412 CVE-2002-0018 OVAL:oval:org.mitre.oval:def:159  View
21219 4412 CVE-2002-0018 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:159  View
21220 4412 CVE-2002-0018 OVAL:oval:org.mitre.oval:def:64  View
21221 4412 CVE-2002-0018 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:64  View
21222 4412 CVE-2002-0018 XF:win-sid-gain-privileges(8023)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63696 JVNDB-2002-000023 Microsoft Windows における信頼関係を結んでいるドメイン間での SID のドメインメンバシップの認証を行わない脆弱性 Microsoft Windows において、信頼されるドメインが認証データすべての SID（Security Identifiers) に対して実際に信頼できるかを確認しないために、ユーザアカウントの認証が行われない脆弱性が存在します。 CVE-2002-0018 4412 10 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000023.html  View