CVE-2001-0045

The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a…

published February 2, 2001

CVSS
—
EPSS
8%
Percentile
95.0
In the wild
Unconfirmed
What it is

⚠️ Local users can pull off some sneaky moves here! The default permissions on the RAS Administration key in Windows NT 4.0 let them execute arbitrary commands—yikes! 😱 Think of it like a restaurant without proper checks—anyone could change the menu item to something awful without the chef's approval! Just like that, a user can redirect commands to a malicious DLL without anyone noticing. This vulnerability could lead to disastrous consequences, allowing a local user to take control and execute malicious code that wreaks havoc on the entire system. Imagine an insider tweaking the rules to serve up chaos instead of dinner—definitely not a recipe for success!

Put simply

Think of it like a restaurant without proper checks—anyone could change the menu item to something awful without the chef's approval! Just like that, a user can redirect commands to a malicious DLL without anyone noticing. The default permissions for the RAS Administration key in Windows NT 4.0 allow local users to change its value, potentially pointing it to a malicious DLL that can execute harmful commands.

What to do

This vulnerability could lead to disastrous consequences, allowing a local user to take control and execute malicious code that wreaks havoc on the entire system. Imagine an insider tweaking the rules to serve up chaos instead of dinner—definitely not a recipe for success! To secure your systems, ensure that the RAS Administration key has appropriate permissions set and restrict access to only trusted administrators. Regularly audit your registry permissions and apply necessary patches or updates to avoid vulnerabilities like this one. You've got this! With a little diligence, you can keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08433 · 95.0th percentile
Published
2001-02-02T05:00Z
EPSS history
Timeline
  • 02 FEB 05:00Z
    The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a…
    cvelistv5