Unscored severity · published Dec 31, 2001
CVE-2001-1517
RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that…
–
CVSS
2.1%
EPSS
No
On KEV
Description
RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it, and the original researcher did not respond to requests for additional information
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1517
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1517
Patch
http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0041.html
cert.uni-stuttgart.de
http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00100.html
Patch
http://www.iss.net/security_center/static/7531.php
www.securityfocus.com
http://www.securityfocus.com/bid/3184
More from Windows 2000
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
8.8
CVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability
7.8
CVE-2010-0232
Microsoft Windows Kernel Exception Handler Vulnerability
7.8
CVE-2009-1123
Microsoft Windows Improper Input Validation Vulnerability
7.8
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability