Oval Definition:oval:org.mitre.oval:def:140
Revision Date:2008-03-24Version:44
Title:Default Registry Permissions on the MTS Package Admin Key
Description:The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2001-0047
Platform(s):Microsoft Windows NT
Product(s):Microsoft Transaction Server (MTS)
Definition Synopsis
  • Software section
  • Microsoft Windows NT is installed
  • AND For Windows NT 4.0 Workstation, Server and Enterprise Edition
  • File %windir%\system32\tcpcfg.dll version is less than 4.0.1381.7064
  • AND NOT Windows NT 4.0 Security Roll-up Package
  • AND For Terminal Server
  • this is an NT Terminal Server
  • AND File %windir%\system32\tcpcfg.dll version is less than 4.0.1381.7097
  • AND NOT Patch Q265714 Installed
  • AND Configuration section
  • MTS Enabled
    • BACK