CVE-2010-0231 (CNNVD-201002-096)
中文标题:
Microsoft Windows SMB NTLM 未经授权认证访问漏洞
英文标题:
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, ...
漏洞描述
中文描述:
Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。 Microsoft Windows 2000 SP4, Windows XP SP2 和 SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1 和 SP2, Windows Server 2008 Gold, SP2 和 R2, 以及 Windows 7 版本中的server服务，其SMB implementation没有使用一个有充足源的熵，存在加密问题漏洞。允许远程攻击者通过大量的认证请求访问文件和其他SMB资源，与server-generated挑战，某些“重复值”和一个认证令牌有关，也叫“SMB NTLM身份验证缺乏熵漏洞”
英文描述:
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability."
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| microsoft | windows_2000 | * | - | - |
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
|
| microsoft | windows_2003_server | * | - | - |
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
|
| microsoft | windows_2003_server | - | - | - |
cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*
|
| microsoft | windows_7 | - | - | - |
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
|
| microsoft | windows_server_2008 | * | - | - |
cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*
|
| microsoft | windows_server_2008 | - | - | - |
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*
|
| microsoft | windows_vista | * | - | - |
cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
|
| microsoft | windows_xp | * | - | - |
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
|
| microsoft | windows_xp | - | - | - |
cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
AV:N/AC:L/Au:N/C:C/I:C/A:C
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2010-0231 |
2025-11-11 15:18:14 | 2025-11-11 07:33:06 |
| NVD | nvd_CVE-2010-0231 |
2025-11-11 14:53:24 | 2025-11-11 07:41:54 |
| CNNVD | cnnvd_CNNVD-201002-096 |
2025-11-11 15:09:08 | 2025-11-11 07:49:41 |
| EXPLOITDB | exploitdb_EDB-15266 |
2025-11-11 15:05:57 | 2025-11-11 08:09:07 |
版本与语言
安全公告
变更历史
查看详细变更
- references_count: 3 -> 6
- tags_count: 0 -> 5
- data_sources: ['cnnvd', 'cve', 'nvd'] -> ['cnnvd', 'cve', 'exploitdb', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 加密问题
- cnnvd_id: 未提取 -> CNNVD-201002-096
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.CRITICAL
- cvss_score: 未提取 -> 10.0
- cvss_vector: NOT_EXTRACTED -> AV:N/AC:L/Au:N/C:C/I:C/A:C
- cvss_version: NOT_EXTRACTED -> 2.0
- affected_products_count: 0 -> 9
- data_sources: ['cve'] -> ['cve', 'nvd']