CVE-2000-0155

Description

Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.

Affected products

• microsoft / windows_95
• microsoft / windows_98
• microsoft / windows_nt4.0 – 4.0

Exploits & proofs of concept

• exploit-dbMicrosoft Windows 95/98/NT 4.0 - 'autorun.inf' Code Executionby Eric Stevens

References

• MISChttp://www.securityfocus.com/bid/993
• MISChttp://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000701bf79cd%24fdb5a620%244c4342a6%40mightye.org