ID CVE-2001-0047
Summary The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities.
References
Vulnerable Configurations
  • cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_nt:terminal_server:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_nt:terminal_server:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 12-10-2018 - 21:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
oval via4
accepted 2008-03-24T04:00:14.203-04:00
class vulnerability
contributors
  • name Matt Busby
    organization The MITRE Corporation
  • name Jonathan Baker
    organization The MITRE Corporation
definition_extensions
comment Microsoft Windows NT is installed
oval oval:org.mitre.oval:def:36
description The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities.
family windows
id oval:org.mitre.oval:def:140
status accepted
submitted 2004-06-08T12:00:00.000-04:00
title Default Registry Permissions on the MTS Package Admin Key
version 74
refmap via4
bid 2065
xf nt-mts-reg-perms(5673)
Last major update 12-10-2018 - 21:30
Published 16-02-2001 - 05:00
Last modified 12-10-2018 - 21:30
Back to Top