Lucene search

K
cve[email protected]CVE-2001-0048
HistoryFeb 12, 2001 - 5:00 a.m.

CVE-2001-0048

2001-02-1205:00:00
web.nvd.nist.gov
22
cve-2001-0048
microsoft 2000
configure your server tool
directory service restore mode
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.1%

The “Configure Your Server” tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the “Directory Service Restore Mode Password” vulnerability.

Affected configurations

NVD
Node
microsoftwindows_2000

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.1%

Related for CVE-2001-0048