NVD

Id
79036  
Name
CVE-2002-0018  
Description
In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2002-03-08  
Modified Date
2008-09-10  
Seq
2002-0018  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
394542 79036 CVE-2002-0018 oval:org.mitre.oval:def:159  View
394543 79036 CVE-2002-0018 oval:org.mitre.oval:def:64  View
394544 79036 CVE-2002-0018 MS02-001  View
394545 79036 CVE-2002-0018 3997  View
394546 79036 CVE-2002-0018 win-sid-gain-privileges(8023)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63696 JVNDB-2002-000023 Microsoft Windows における信頼関係を結んでいるドメイン間での SID のドメインメンバシップの認証を行わない脆弱性 Microsoft Windows において、信頼されるドメインが認証データすべての SID（Security Identifiers) に対して実際に信頼できるかを確認しないために、ユーザアカウントの認証が行われない脆弱性が存在します。 CVE-2002-0018 4412 CVE-2002-0018 79036 10 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000023.html 2002-01-30 2007-04-01 View