Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.6
CVSSv2

CVE-2002-1230

Published: 04/11/2002 Updated: 30/04/2019
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 510
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Windows 2000

Vulnerability Summary

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka "Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation."

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows 2000

microsoft windows 2000 terminal services

Exploits

Exploit DB: Microsoft Windows XP/2000/NT 4.0 - NetDDE Privilege Escalation (2)
source: wwwsecurityfocuscom/bid/5927/info The Winlogon NetDDE Agent can be leveraged to allow local privilege escalation This is related to the Microsoft Windows Window Message Subsystem Design Error Vulnerability (BID 5408) A local user can use a WM_COPYDATA message to send arbitrary code to NetDDE, which will be executed with Local S ...
Exploit DB: Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (4)
source: wwwsecurityfocuscom/bid/5408/info A serious design error in the Win32 API has been reported The issue is related to the inter-window message passing system This vulnerability is wide-ranging and likely affects almost every Win32 window-based application Attackers with local access may exploit this vulnerability to elevate pr ...
Exploit DB: Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (2)
source: wwwsecurityfocuscom/bid/5408/info A serious design error in the Win32 API has been reported The issue is related to the inter-window message passing system This vulnerability is wide-ranging and likely affects almost every Win32 window-based application Attackers with local access may exploit this vulnerability to elevate priv ...
Exploit DB: Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (8)
source: wwwsecurityfocuscom/bid/5408/info A serious design error in the Win32 API has been reported The issue is related to the inter-window message passing system This vulnerability is wide-ranging and likely affects almost every Win32 window-based application Attackers with local access may exploit this vulnerability to elevat ...
Exploit DB: Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (1)
source: wwwsecurityfocuscom/bid/5408/info A serious design error in the Win32 API has been reported The issue is related to the inter-window message passing system This vulnerability is wide-ranging and likely affects almost every Win32 window-based application Attackers with local access may exploit this vulnerability to elevate privi ...
Exploit DB: Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (5)
source: wwwsecurityfocuscom/bid/5408/info A serious design error in the Win32 API has been reported The issue is related to the inter-window message passing system This vulnerability is wide-ranging and likely affects almost every Win32 window-based application Attackers with local access may exploit this vulnerability to elevate p ...
Exploit DB: Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (6)
source: wwwsecurityfocuscom/bid/5408/info A serious design error in the Win32 API has been reported The issue is related to the inter-window message passing system This vulnerability is wide-ranging and likely affects almost every Win32 window-based application Attackers with local access may exploit this vulnerability to elevate ...
Exploit DB: Microsoft Windows XP/2000/NT 4.0 - NetDDE Privilege Escalation (1)
source: wwwsecurityfocuscom/bid/5927/info The Winlogon NetDDE Agent can be leveraged to allow local privilege escalation This is related to the Microsoft Windows Window Message Subsystem Design Error Vulnerability (BID 5408) A local user can use a WM_COPYDATA message to send arbitrary code to NetDDE, which will be executed with Local Sy ...
Exploit DB: Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (3)
source: wwwsecurityfocuscom/bid/5408/info A serious design error in the Win32 API has been reported The issue is related to the inter-window message passing system This vulnerability is wide-ranging and likely affects almost every Win32 window-based application Attackers with local access may exploit this vulnerability to elevate pri ...
Exploit DB: Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (7)
source: wwwsecurityfocuscom/bid/5408/info A serious design error in the Win32 API has been reported The issue is related to the inter-window message passing system This vulnerability is wide-ranging and likely affects almost every Win32 window-based application Attackers with local access may exploit this vulnerability to elevate ...

References

NVD-CWE-Otherhttp://www.packetstormsecurity.nl/filedesc/GetAd.c.htmlhttp://www.iss.net/security_center/static/10343.phphttp://getad.chat.ru/http://www.ciac.org/ciac/bulletins/n-027.shtmlhttp://www.securityfocus.com/bid/5927https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A681https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-071https://nvd.nist.govhttps://www.exploit-db.com/exploits/21923/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook