News

Microsoft Warns of W2K Bug

Microsoft Corp. has released a patch that eliminates a security vulnerability in Windows 2000. The vulnerability could allow a malicious user to disrupt normal operation of an affected machine, and potentially of an entire network.

Microsoft users who have already applied Windows 2000 Service Pack 1 are protected against the vulnerability and do not need to take further action.

The vulnerability could allow a malicious user to corrupt parts of a Windows 2000 system's local security policy, with the effect of disrupting domain membership and trust relationship information. If a workstation or member server were attacked via this vulnerability, it would effectively remove the machine from the domain; if a domain controller were attacked, it could no longer process domain logon requests. Recovering from such an attack would likely require that a known working configuration be restored from backup.

It would not be necessary to be an authenticated domain member in order to mount an attack in this manner. Any user who could establish an RPC connection with an affected machine and send the proper command sequence to it could exploit the vulnerability. If the malicious user were an intranet user, he could likely attack any machine within the network; if the malicious user were on the Internet, he could likely only attack machines on the network edge that allow RPC connections.

Microsoft Windows 2000 Professional, Server, and Advanced Server are all affected. The patch is available at http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24019. - Isaac Slepner

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Office Mobile Apps To End as Microsoft Highlights New Office App

    Microsoft plans to end support for Windows 10 Mobile applications on Jan. 12, 2021, according to a Friday announcement.

  • Is Microsoft Finally Reinventing Office?

    Microsoft is testing out a new technology called "Fluid Framework." It could mean that Brien's dream of one Office app to rule them all might soon become reality.

  • Azure Active Directory Connect Preview Adds Support for Disconnected AD Forests

    Microsoft on Thursday announced a preview of a new "Cloud Provisioning" feature for the Azure Active Directory Connect service that promises to bring together scattered Active Directory "forests."

  • Microsoft Defender ATP Gets macOS Investigation Support

    The endpoint and detection response (EDR) feature in Microsoft Defender Advanced Threat Protection (ATP) has reached the "general availability" stage for macOS devices.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.