Lucene search
MitreCVE-2001-0502HistoryMar 09, 2002 - 5:00 a.m.
CVE-2001-0502
2002-03-0905:00:00
mitre
web.nvd.nist.gov
32
cve-2001-0502
windows 2000
ldap server
ssl
user permissions
local users
password modification.
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.4
Confidence
High
EPSS
0
Percentile
12.7%
Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users.
Affected configurations
Node
microsoftwindows_2000
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:* |
Related
nessus
nessus
cvelist
cvelist
CVE-2001-0502
2002-03-09 05:00:00
nvd
nvd
CVE-2001-0502
2001-07-21 04:00:00
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.4
Confidence
High
EPSS
0
Percentile
12.7%
Related for CVE-2001-0502