Unscored severity · published Apr 12, 2000
CVE-2000-0259
The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of…
–
CVSS
1.5%
EPSS
No
On KEV
Description
The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Terminal Server · Microsoft
All versions, or not specified · source: NVD
WN
Windows NT · Microsoft
4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0259
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0259
Patch
http://www.securityfocus.com/bid/1105
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-024
More from Terminal Server
–
CVE-2007-2593
The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server…
–
CVE-2006-4465
Microsoft Terminal Server, when running an application session with the "Start program at logon" and "Override settings from user profile and Client Connection Manager wizard"…
–
CVE-2001-0540
Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote…
–
CVE-2000-0404
The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame"…
–
CVE-2000-0305
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical…