high7.2Public exploit code
CVE-2000-0100
The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Systems Management Server 2.0 - Default Permissions1999-12-29 · local · windows · Verified
Impact
The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Systems Management Server | Version 2.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/ntbugtraq/current/0045.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-012
- http://archives.neohapsis.com/archives/ntbugtraq/current/0045.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-012