The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:42
Type | Values Removed | Values Added |
---|---|---|
References | () http://cert.uni-stuttgart.de/archive/bugtraq/2002/01/msg00278.html - | |
References | () http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq188700 - | |
References | () http://www.heysoft.de/nt/lbh.htm - Vendor Advisory | |
References | () http://www.securityfocus.com/bid/3933 - |
07 Nov 2023, 01:56
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2002-12-31 05:00
Updated : 2024-11-20 23:42
NVD link : CVE-2002-2028
Mitre link : CVE-2002-2028
CVE.ORG link : CVE-2002-2028
JSON object : View
Products Affected
microsoft
- windows_2000
- windows_nt
- windows_xp
CWE