CVE

Id
6131  
CVE No.
CVE-2002-1749  
Status
Candidate  
Description
Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges.  
Phase
Assigned (20050621)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
34831 6131 CVE-2002-1749 NTBUGTRAQ:20020211 Terminal doesn"t lock after disconnect in Terminal Services  View
34832 6131 CVE-2002-1749 URL:http://www.ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0202&L=ntbugtraq&T=0&O=D&F=N&P=5224  View
34833 6131 CVE-2002-1749 BID:4095  View
34834 6131 CVE-2002-1749 URL:http://www.securityfocus.com/bid/4095  View
34835 6131 CVE-2002-1749 XF:win2k-terminal-services-unlocked(8199)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63705 JVNDB-2002-000032 Microsoft Windows の Terminal Services におけるパスワード制限を回避される脆弱性 Microsoft Windows の Terminal Services Client には、スクリーンセーバが起動している間に接続が切れてしまった場合に再接続を行うと、パスワードによるスクリーンセーバのロック解除を回避し再認証せずに使用可能となる脆弱性が存在します。 CVE-2002-1749 6131 7.2 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000032.html  View