Executive Summary
| Informations | |||
|---|---|---|---|
| Name | MS02-070 | First vendor Publication | N/A |
| Vendor | Microsoft | Last vendor Modification | N/A |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Flaw in SMB Signing Could Enable Group Policy to be Modified (309376) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:277 | |||
| Oval ID: | oval:org.mitre.oval:def:277 | ||
| Title: | SMB Session Digital Signature Sidestep | ||
| Description: | The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2002-1256 | Version: | 2 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | SMB Signing (Server Message Block) |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Os | 4 | |
| Os | 4 | |
| Os | 3 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2005-11-03 | Name : Flaw in SMB Signing Could Enable Group Policy to be Modified (329170) File : nvt/smb_nt_ms02-070.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 11799 | Microsoft Windows SMB Signing Group Policy Modification |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2003-01-25 | Name : It is possible to send unsigned SMB packets. File : smb_nt_ms02-070.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:44:48 |
|
