Unscored CVE-2001-0016 EUVD-2001-0016GHSA-8hx3-74gm-vfhh

NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local use…

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access.

References

MS01-008 vendor-advisory
20010207 Local promotion vulnerability in NT4's NTLM Security Support Provider vendor-advisory
2348 vdb-entry
ntlm-ssp-elevate-privileges(6076) vdb-entry