CVE-2005-3177

CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://support.microsoft.com/kb/831374	Patch Vendor Advisory
http://support.microsoft.com/kb/831375	Patch Vendor Advisory
http://support.microsoft.com/kb/900345
http://support.microsoft.com/kb/831374	Patch Vendor Advisory
http://support.microsoft.com/kb/831375	Patch Vendor Advisory
http://support.microsoft.com/kb/900345

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_2000::sp4::fr::::
	cpe:2.3:o:microsoft:windows_2003_server:r2:::::::*
	cpe:2.3:o:microsoft:windows_xp::gold::::::*

History

21 Nov 2024, 00:01

Type	Values Removed	Values Added
References	~~() http://support.microsoft.com/kb/831374 - Patch, Vendor Advisory~~	() http://support.microsoft.com/kb/831374 - Patch, Vendor Advisory
References	~~() http://support.microsoft.com/kb/831375 - Patch, Vendor Advisory~~	() http://support.microsoft.com/kb/831375 - Patch, Vendor Advisory
References	~~() http://support.microsoft.com/kb/900345 -~~	() http://support.microsoft.com/kb/900345 -

Information

Published : 2005-10-06 10:02

Updated : 2024-11-21 00:01

NVD link : CVE-2005-3177

Mitre link : CVE-2005-3177

CVE.ORG link : CVE-2005-3177

JSON object : View

Products Affected

microsoft

windows_2003_server
windows_xp
windows_2000

CWE

NVD-CWE-Other

{"id": "CVE-2005-3177", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-10-06T10:02:00.000", "references": [{"url": "http://support.microsoft.com/kb/831374", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://support.microsoft.com/kb/831375", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://support.microsoft.com/kb/900345", "source": "cve@mitre.org"}, {"url": "http://support.microsoft.com/kb/831374", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.microsoft.com/kb/831375", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.microsoft.com/kb/900345", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed."}], "lastModified": "2024-11-21T00:01:17.143", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*", "vulnerable": true, "matchCriteriaId": "330B6798-5380-44AD-9B52-DF5955FA832C"}, {"criteria": "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E7FD818-322D-4089-A644-360C33943D29"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}