CVE-2010-0231

Microsoft Windows - SMB NTLM Authentication Spoofing via Insufficient Entropy

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-0231. PoCs published by Hernan Ochoa.

AI-analyzed exploit summary This is a detailed security advisory describing CVE-2010-0231, a vulnerability in Windows SMB NTLM authentication due to weak nonce generation. It includes technical analysis, affected systems, and proof-of-concept detection methods but does not contain functional exploit code.

Description

The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability."

Exploits (1)

exploitdb WRITEUP VERIFIED
by Hernan Ochoa · textremotewindows
https://www.exploit-db.com/exploits/15266

This is a detailed security advisory describing CVE-2010-0231, a vulnerability in Windows SMB NTLM authentication due to weak nonce generation. It includes technical analysis, affected systems, and proof-of-concept detection methods but does not contain functional exploit code.

Classification
Writeup 100%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Theoretical
Target: Microsoft Windows SMB NTLM authentication (multiple versions)
No auth needed
Prerequisites: Network access to SMB service (port 445)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7751
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA10-040A.html

Scores

EPSS 0.4126
EPSS Percentile 98.5%

Details

CWE
CWE-264 CWE-310
Status published
Products (6)
microsoft/windows_2000
microsoft/windows_2003_server (3 CPE variants)
microsoft/windows_7
microsoft/windows_server_2008 (8 CPE variants)
microsoft/windows_vista (4 CPE variants)
microsoft/windows_xp (4 CPE variants)
Published Feb 10, 2010
Tracked Since Feb 18, 2026