Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

eEye reports vulnerability with Windows NT,2000,XP and Server 2003

by Donna Buenaventura Mar 23, 2004 11:26AM PST

Date Reported: March 18, 2004

Vendor: Microsoft

Description: A locally-exploitable vulnerability that allows unprivileged code to subvert all operating system or third-party security measures, providing the attacker with privileges greater than SYSTEM.

Severity: Medium

Remote Code Execution: No

Software Affected: This vulnerability affects core services in the operating system.

Operating Systems Affected:
Windows NT 4.0 (all versions)
Windows 2000 (all versions)
Windows XP (all versions)
Windows Server 2003 (all versions)

Estimated Number of Vulnerable Machines: 300 Million

Status: Initial report stage.

http://www.eeye.com/html/Research/Upcoming/20040318.html