CVE-2000-0298

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Apr 7, 2000

Updated: Oct 10, 2017

Summary

CVE-2000-0298 is a vulnerability affecting the unattended installation of Windows 2000. If the OEMPreinstall option is used during setup, insecure permissions are set for the All Users and Default Users directories. This issue can result in unauthorized access to these directories, potentially leading to data theft or system compromise. Organizations that have utilized the OEMPreinstall option during their Windows 2000 deployments are advised to review and adjust the permissions on these directories to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Microsoft Windows 2000

Affected Vendors

Microsoft

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/NWlUUX
https://www.cve.org/CVERecord?id=CVE-2000-0298
https://nvd.nist.gov/vuln/detail/CVE-2000-0298

Back to Vulnerability Database