Lucene search
HistoryMar 09, 2002 - 5:00 a.m.
CVE-2001-0502
cve-2001-0502
windows 2000
ldap server
ssl
user permissions
local users
password modification.
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.7%
Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users.
Affected configurations
Node
microsoftwindows_2000
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_2000 | microsoft windows 2000 | eq | * |
Related
nessus
nessus
cvelist
cvelist
CVE-2001-0502
2002-03-09 05:00:00
nvd
nvd
CVE-2001-0502
2001-07-21 04:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.7%
Related for CVE-2001-0502