CNCVE编号:CNCVE-20010373 CVE编号:CAN-2001-0373 安全级别:中 漏洞中文描述: Windows NT 与Windows 2000中Dr. Watson程序的缺省设置可以产生具有全局可读权限的user.dmp crash dump文件,这使得本地用户可以获得访问敏感信息的权限。 漏洞英文描述: The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information. 漏洞参考: BID:2501 URL:http://www.securityfocus.com/bid/2501 XF:win-userdmp-insecure-permission URL:http://xforce.iss.net/static/6275.php 系统类型: Win2000/NT 漏洞类型:设计错误