CVE-2001-0048: Undefined Security Weakness

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability...

Security Bulletin MS00-099

====================================================================== Issue: "Configure Your Server" tool creates blank password for Directory Service Restore Mode Date: 20 December 2000 Affected Software: Windows 2000 server and Advanced Server Impact: Install malicious code Bulletin ID: MS00-0...

CVE-1999-0646

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...