CVE-2001-0860
Windows 2000 and XP - IP Address Spoofing via Terminal Services Manager MMC
Title source: llmDescription
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation (NAT).
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/7538
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=100578220002083&w=2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/3541
Scores
EPSS
0.0483
EPSS Percentile
91.1%
Details
Status
published
Products (2)
microsoft/windows_2000
microsoft/windows_xp
Published
Dec 06, 2001
Tracked Since
Feb 18, 2026