News

Microsoft Warns of W2K Bug

Microsoft Corp. has released a patch that eliminates a security vulnerability in Windows 2000. The vulnerability could allow a malicious user to disrupt normal operation of an affected machine, and potentially of an entire network.

Microsoft users who have already applied Windows 2000 Service Pack 1 are protected against the vulnerability and do not need to take further action.

The vulnerability could allow a malicious user to corrupt parts of a Windows 2000 system's local security policy, with the effect of disrupting domain membership and trust relationship information. If a workstation or member server were attacked via this vulnerability, it would effectively remove the machine from the domain; if a domain controller were attacked, it could no longer process domain logon requests. Recovering from such an attack would likely require that a known working configuration be restored from backup.

It would not be necessary to be an authenticated domain member in order to mount an attack in this manner. Any user who could establish an RPC connection with an affected machine and send the proper command sequence to it could exploit the vulnerability. If the malicious user were an intranet user, he could likely attack any machine within the network; if the malicious user were on the Internet, he could likely only attack machines on the network edge that allow RPC connections.

Microsoft Windows 2000 Professional, Server, and Advanced Server are all affected. The patch is available at http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24019. - Isaac Slepner

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft Resumes Rerelease of Windows 10 Version 1809

    Microsoft on Wednesday once more resumed its general rollout of the Windows 10 version 1809 upgrade, also known as the "October 2018 Update."

  • Microsoft Ups Its Windows 10 App Compatibility Assurances

    Microsoft gave assurances this week that organizations adopting Windows 10 likely won't face application compatibility issues.

  • SharePoint Online Users To Get 'Modern' UI Push in April

    Microsoft plans to alter some of the tenant-level blocking capabilities that may have been set up by organizations and deliver its so-called "modern" user interface (UI) to Lists and Libraries for SharePoint Online users, starting in April.

  • How To Use PowerShell Splatting

    Despite its weird name, splatting can be a really handy technique if you create a lot of PowerShell scripts.

comments powered by Disqus
Most   Popular

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.