CVE-2001-1122 Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode.
LowCVSS 2.1
EPSS 3.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
References
- 20010803 REPOST: A damaging local DoS in WinNT SP6a exploit mailing-list patch vendor-advisory
- 3144 exploit vdb-entry vendor-advisory
- winnt-nt4all-dos(6943) vdb-entry