NVD

Id
78948  
Name
CVE-2001-1517  
Description
** DISPUTED ** RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it, and the original researcher did not respond to requests for additional information.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-05  
Published
2001-12-31  
Modified Date
2008-09-05  
Seq
2001-1517  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
394208 78948 CVE-2001-1517 20011112 RADIX1112200102  View
394209 78948 CVE-2001-1517 20011114 RE:Radix Research Reports RADIX1112200101, RADIX1112200102, and RADIX1112200103  View
394210 78948 CVE-2001-1517 win2k-runas-reveal-information(7531)  View
394211 78948 CVE-2001-1517 3184  View

Related JVN