CVE-2001-0003

Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/2199	Patch Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001
https://exchange.xforce.ibmcloud.com/vulnerabilities/5920
http://www.securityfocus.com/bid/2199	Patch Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001
https://exchange.xforce.ibmcloud.com/vulnerabilities/5920

Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:microsoft:windows_2000::::::::
	cpe:2.3:o:microsoft:windows_me::::::::
	cpe:2.3:o:microsoft:windows_nt::::::::

History

20 Nov 2024, 23:34

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/bid/2199 - Patch, Vendor Advisory~~	() http://www.securityfocus.com/bid/2199 - Patch, Vendor Advisory
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001 -~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/5920 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/5920 -

Information

Published : 2001-02-12 05:00

Updated : 2024-11-20 23:34

NVD link : CVE-2001-0003

Mitre link : CVE-2001-0003

CVE.ORG link : CVE-2001-0003

JSON object : View

Products Affected

microsoft

windows_me
windows_2000
windows_nt
office

CWE

NVD-CWE-Other

{"id": "CVE-2001-0003", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-02-12T05:00:00.000", "references": [{"url": "http://www.securityfocus.com/bid/2199", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5920", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/2199", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5920", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the \"Web Client NTLM Authentication\" vulnerability."}], "lastModified": "2024-11-20T23:34:22.213", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9A82D13-513C-46FA-AF51-0582233E230A"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}, {"criteria": "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "799DA395-C7F8-477C-8BC7-5B4B88FB7503"}, {"criteria": "cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED27882B-A02A-4D5F-9117-A47976C676E0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}