CVE-2010-0231
Microsoft Windows - SMB NTLM Authentication Spoofing via Insufficient Entropy
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-0231. PoCs published by Hernan Ochoa.
AI-analyzed exploit summary This is a detailed security advisory describing CVE-2010-0231, a vulnerability in Windows SMB NTLM authentication due to weak nonce generation. It includes technical analysis, affected systems, and proof-of-concept detection methods but does not contain functional exploit code.
Description
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability."
Exploits (1)
This is a detailed security advisory describing CVE-2010-0231, a vulnerability in Windows SMB NTLM authentication due to weak nonce generation. It includes technical analysis, affected systems, and proof-of-concept detection methods but does not contain functional exploit code.