Lucene search

K
cve[email protected]CVE-2004-0540
HistoryAug 06, 2004 - 4:00 a.m.

CVE-2004-0540

2004-08-0604:00:00
web.nvd.nist.gov
29
cve-2004-0540
nvd
microsoft windows 2000
expired password
domain
security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.

Affected configurations

NVD
Node
microsoftwindows_2000

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%