CVE-2005-0051 Information disclosure in n/a
Remote attackers can obtain sensitive user access information via anonymous named pipe logon in the Windows Server service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-0051?
CVE-2005-0051 is a high-severity vulnerability in Microsoft Windows Xp, published on 8 Feb 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."
Which versions are affected by CVE-2005-0051?
It affects 1 product.
Products include Microsoft Windows Xp.
How do I fix CVE-2005-0051?
No fix has been published for CVE-2005-0051 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-0051 being exploited?
There is no known exploitation of CVE-2005-0051 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Windows Xp
Sources
Also known as GHSA-5gh2-hrf5-9968.