CVE-2001-0349 | BDVDB-2026-2487 Detail

Description#

Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of this vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031
http://www.kb.cert.org/vuls/id/587587
http://www.securityfocus.com/bid/2849
https://exchange.xforce.ibmcloud.com/vulnerabilities/6664

Exploit#

No public exploit known

History#

Version 12001-07-27Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.