CVE-2002-0443

Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://online.securityfocus.com/archive/1/260704	Vendor Advisory
http://www.iss.net/security_center/static/8402.php	Vendor Advisory
http://www.securityfocus.com/bid/4256	Exploit Vendor Advisory
http://online.securityfocus.com/archive/1/260704	Vendor Advisory
http://www.iss.net/security_center/static/8402.php	Vendor Advisory
http://www.securityfocus.com/bid/4256	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_2000::::::::
	cpe:2.3:o:microsoft:windows_2000::sp1::::::*
	cpe:2.3:o:microsoft:windows_2000::sp2::::::*

History

20 Nov 2024, 23:39

Type	Values Removed	Values Added
References	~~() http://online.securityfocus.com/archive/1/260704 - Vendor Advisory~~	() http://online.securityfocus.com/archive/1/260704 - Vendor Advisory
References	~~() http://www.iss.net/security_center/static/8402.php - Vendor Advisory~~	() http://www.iss.net/security_center/static/8402.php - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/4256 - Exploit, Vendor Advisory~~	() http://www.securityfocus.com/bid/4256 - Exploit, Vendor Advisory

Information

Published : 2002-07-26 04:00

Updated : 2024-11-20 23:39

NVD link : CVE-2002-0443

Mitre link : CVE-2002-0443

CVE.ORG link : CVE-2002-0443

JSON object : View

Products Affected

microsoft

windows_2000

CWE

NVD-CWE-Other

{"id": "CVE-2002-0443", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2002-07-26T04:00:00.000", "references": [{"url": "http://online.securityfocus.com/archive/1/260704", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/8402.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/4256", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://online.securityfocus.com/archive/1/260704", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.iss.net/security_center/static/8402.php", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/4256", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords."}], "lastModified": "2024-11-20T23:39:06.397", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "294EBA01-147B-4DA0-937E-ACBB655EDE53"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E8B7346-F2AA-434C-A048-7463EC1BB117"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}