PT-2002-1494 · Microsoft · Windows 2000

Publicado 2002-07-26 · Atualizado 2019-04-30 · CVE-2002-0443

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000

Description The issue allows local users to bypass the policy that prohibits reusing old passwords. This is achieved by changing the current password before it expires, which does not enable the check for previous passwords.

Recommendations For Microsoft Windows 2000, consider implementing a workaround to enforce password history checks, such as manually tracking password changes or using a third-party tool is not recommended, instead, as a temporary workaround, consider restricting password changes to only when necessary until a proper fix can be applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2002-0443

Produtos afetados

Windows 2000

Referências · 4

• 🔥 http://securityfocus.com/bid/4256 · Exploit
• http://online.securityfocus.com/archive/1/260704 · Aviso do Fabricante
• http://iss.net/security_center/static/8402.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0443 · Nota de Segurança