CVE-2001-0350

Published Jul 27, 2001 CVSS 2.0 · 4.6 Medium EPSS 1.5% KEV · Not listed
Description
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of this vulnerability.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2001-0350 Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of this vulnerability.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 4:14 AM
Reserved
May 16, 2001, 12:00 AM
Status
Modified
Published
Jul 21, 2001, 4:00 AM
Modified
Jun 16, 2026, 9:54 PM