VulnerabilityModified
CVE-2001-0016
NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access.
HIGH 7.2EPSS 2.07%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.07%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 2.07% probability · 80th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows nt
- Source
- cve@mitre.org
References
- http://razor.bindview.com/publish/advisories/adv_NTLMSSP.html
- http://www.securityfocus.com/bid/2348
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-008
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6076
- http://razor.bindview.com/publish/advisories/adv_NTLMSSP.html
- http://www.securityfocus.com/bid/2348
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-008
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6076
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.