CVE-2000-0834 The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to th...
HighCVSS 7.5
EPSS 39.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
References
- A091400-1 vendor-advisory
- 1683 exploit patch vdb-entry vendor-advisory
- MS00-067 vendor-advisory
- win2k-telnet-ntlm-authentication(5242) vdb-entry