Microsoft has released a tool that corrects the permissions on several registry values in Microsoft® Windows® 2000. The default permissions could allow a malicious user to monitor or reconfigure certain devices on a network.

Frequently asked questions regarding this vulnerability and the patch can be found at http://www.microsoft.com/technet/security/bulletin/fq00-096.asp

Affected Software Versions
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server
Microsoft Windows 2000 Advanced Server

Patch Availability
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24500

Note: The Security Configuration and Analysis template provided in the patch can be applied to any Windows 2000 system.