CVE-2009-0094

Microsoft Windows 2000 SP4-Server 2003 SP1-SP2 - Privilege Escalation

Title source: llm
STIX 2.1

Description

The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features, and conduct man-in-the-middle attacks by spoofing a proxy server or ISATAP route, by registering one of these names in the WINS database, aka "WPAD WINS Server Registration Vulnerability," a related issue to CVE-2007-1692.

References (10)

Core 10
Core References
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA09-069A.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6117
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0661
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34217
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/52520
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34013
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1021829

Scores

EPSS 0.2346
EPSS Percentile 97.6%

Details

Status published
Products (3)
microsoft/windows_2000
microsoft/windows_server_2003 (4 CPE variants)
microsoft/windows_server_2008 (2 CPE variants)
Published Mar 11, 2009
Tracked Since Feb 18, 2026