Unrated severityNVD Advisory· Published Jul 11, 2005· Updated Jun 16, 2026

CVE-2005-2150

Description

Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl or (2) read eventlogs via eventlog.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Windows 20002 versions
cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
- (no CPE)range: < SP4 URP1
Microsoft/Windows Nt
cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
Microsoft/Windows NT 4.0llm-fuzzy
Range: < SP4+URP1

Patches

Vulnerability mechanics

References

marc.infonvd
secunia.com/advisories/14189nvd
securitytracker.com/idnvd
www.hsc.fr/ressources/presentations/null_sessions/nvd
www.securityfocus.com/bid/14177nvd
www.securityfocus.com/bid/14178nvd
exchange.xforce.ibmcloud.com/vulnerabilities/21286nvd
exchange.xforce.ibmcloud.com/vulnerabilities/21288nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.015
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000