CVE-2005-3173

2022-10-0316:22:40

mitre

www.cve.org

microsoft windows 2000

update rollup 1

group policies

upn credentials

domain controller

security vulnerability

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.3%

JSON

Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct domain controller and could allow the user to bypass intended restrictions.

References

support.microsoft.com/kb/821102

support.microsoft.com/kb/900345