Windows 2000 Network DDE Vulnerability Patch MS01-007 (2/9/01)

• Quick specs
• Price: Free
• Operating system: Windows 2000
• Date added: June 29, 2001
• Total Downloads: 10,049
• Downloads last week: 2
• See full specifications

Add to my list Add to my Watch List

Download Now (286.7K)

Tested spyware free

Publisher's description

Network Dynamic Data Exchange (DDE) is a technology that enables applications on different Windows computers to dynamically share data. This sharing is effected via communications channels called trusted shares, which are managed by a service called the Network DDE Agent. By design, processes on the local machine can levy requests upon the Network DDE Agent, including ones that indicate what application should be run in conjunction with a particular trusted share. However, a vulnerability exists because, in Windows 2000, the Network DDE Agent runs using the Local System security context and processes all requests using this context, rather than that of the user. This would give an attacker an opportunity to cause the Network DDE Agent to run code of her choice in Local System context, as a means of gaining complete control over the local machine.

Microsoft recommends that customers using Windows 2000 workstations or who allow unprivileged users to run code on Windows 2000 servers apply the patch immediately. In addition, customers operating Windows 2000 Web servers should consider applying the patch to those machines as well, as a precautionary measure.

Real Player SP

Watch your favorite videos on your favorite devices.

Download Now

More popular Corporate Security Software downloads

1. 2,278 downloads 1. Folder Guard
2. 1,060 downloads 2. L0phtCrack
3. 735 downloads 3. McAfee Total Protection for Small Business
4. 661 downloads 4. Spyware Doctor Enterprise Free Edition
5. 447 downloads 5. Wireshark
6. See all Corporate Security Software downloads