Microsoft Windows 2000默认40位加密保护存储漏洞

漏洞信息详情

Microsoft Windows 2000默认40位加密保护存储漏洞

• CNNVD编号：CNNVD-200006-001
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2000-0487
  
• 漏洞类型：
  
  
  设计错误
  
• 发布时间：
  
  2000-06-01
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  microsoft
• 漏洞来源：
  Publicized in a Mi…

Windows 2000的保护存储无法选择最强的可用加密。此漏洞导致使用默认40位加密而不是56位加密，又称为\”Protected Store Key Length\”漏洞。

Microsoft has released the following patch which rectifies this vulnerability. It was originally released on June 1. Microsoft released an updated patch on July 26 in order to fix a regression error :
Microsoft Windows 2000 Professional

• Microsoft Q260219
  
  http://www.microsoft.com/Downloads/Release.asp?ReleaseID=23332

Microsoft Windows 2000 Advanced Server

• Microsoft Q260219
  
  http://www.microsoft.com/Downloads/Release.asp?ReleaseID=23332

Microsoft Windows 2000 Server

• Microsoft Q260219
  
  http://www.microsoft.com/Downloads/Release.asp?ReleaseID=23332

来源: BID
名称: 1295
链接:http://www.securityfocus.com/bid/1295

来源: MS
名称: MS00-032
链接:http://www.microsoft.com/technet/security/bulletin/ms00-032.asp