Description
Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/4095
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/8199
Vendor Advisory mailing-list
x_refsource_ntbugtraq
http://www.ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0202&L=ntbugtraq&T=0&O=D&F=N&P=5224
Scores
EPSS
0.0146
EPSS Percentile
71.0%
Details
Status
published
Products (1)
microsoft/windows_2000
(3 CPE variants)
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026