PT-2005-3996 · Microsoft · Windows 2000

Publicado 2005-10-06 · Atualizado 2008-09-05 · CVE-2005-3174

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 before Update Rollup 1 for SP4

Description The issue allows users to log on to the domain even when their password has expired, under specific conditions related to the length of the fully qualified domain name (FQDN). This occurs when the FQDN is exactly 8 characters long.

Recommendations For Microsoft Windows 2000 before Update Rollup 1 for SP4, apply Update Rollup 1 for SP4 to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-3174

Produtos afetados

Windows 2000

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-3174 · Nota de Segurança
• http://support.microsoft.com/kb/830847 · Aviso do Fabricante
• http://support.microsoft.com/kb/900345 · Aviso do Fabricante