CVE-2001-0347

Published: Jul 21, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid.

Affected (1)

Products: Microsoft: Windows 2000

Microsoft

1 product

Windows 2000

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions

References (10)

http://www.ciac.org/ciac/bulletins/l-092.shtml

Source: cve@mitre.org

http://www.osvdb.org/5686

Source: cve@mitre.org

http://www.securityfocus.com/bid/2847

Source: cve@mitre.org

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/6665

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/l-092.shtml