CVE-2001-0860
- State
- Published
- Severity
- Not scored
- Published
- Mar 9, 2002
- Updated
- Aug 8, 2024
- Reserved
- Nov 22, 2001
Description
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation (NAT).
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- win-terminal-spoof-address(7538)vdb-entry
- 20011114 Xato Advisory: Win2k/XP Terminal Services IP Spoofingmailing-list
- 3541vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.