Back to search
CVE-2002-1256
Published: Sep 1, 2004
Modified: Aug 8, 2024
PUBLISHED
Description
The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
MS02-070
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:277
vdb-entry
signature
x_refsource_OVAL
6367
vdb-entry
x_refsource_BID
win-smb-policy-modification(10843)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now