CVE-2001-0261 Information disclosure in n/a
A local attacker can recover plaintext from encrypted files due to improper backup destruction in Windows 2000 EFS.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2001-0261?
CVE-2001-0261 is a low-severity vulnerability in Microsoft Windows 2000, published on 4 Apr 2001. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files.
Which versions are affected by CVE-2001-0261?
It affects 1 product.
Products include Microsoft Windows 2000.
How do I fix CVE-2001-0261?
No fix has been published for CVE-2001-0261 yet. Limit exposure of the affected software until one is available.
Is CVE-2001-0261 being exploited?
There is no known exploitation of CVE-2001-0261 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Windows 2000
Sources
Also known as GHSA-fp6q-9qw2-6vhc.