CVE-2001-0006

HighCVSS 7.1/10Last modified Jun 16, 2026

Description

The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-732

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Feb 12, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-00075.0Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administrCVE-2001-000810.0Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.CVE-2001-00095.0Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack.CVE-2001-001010.0Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.CVE-2001-001110.0Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.CVE-2001-00125.0BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.CVE-2001-001310.0Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.CVE-2001-00145.0Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackerCVE-2001-00157.2Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisibleCVE-2001-00167.2NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local userCVE-2001-00175.0Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "MalfCVE-2001-00185.0Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of se
CVE-2001-0006: High severity, CVSS 7.1 | Vulnix