CVE-2005-2150

Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which…

published July 11, 2005

CVSS
—
EPSS
19%
Percentile
97.3
In the wild
Unconfirmed
What it is

Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl or (2) read eventlogs via eventlog.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19356 · 97.3th percentile
Published
2005-07-11T04:00Z
EPSS history
Timeline
  • 11 JUL 04:00Z
    Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which…
    cvelistv5