PT-2002-1494 · Microsoft · Windows 2000

Published 2002-07-26 · Updated 2019-04-30 · CVE-2002-0443

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000

Description The issue allows local users to bypass the policy that prohibits reusing old passwords. This is achieved by changing the current password before it expires, which does not enable the check for previous passwords.

Recommendations For Microsoft Windows 2000, consider implementing a workaround to enforce password history checks, such as manually tracking password changes or using a third-party tool is not recommended, instead, as a temporary workaround, consider restricting password changes to only when necessary until a proper fix can be applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2002-0443

Affected Products

Windows 2000

References · 4

• 🔥 http://securityfocus.com/bid/4256 · Exploit
• http://online.securityfocus.com/archive/1/260704 · Vendor Advisory
• http://iss.net/security_center/static/8402.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0443 · Security Note