CVE-2005-3174

2022-10-0316:22:40

mitre

www.cve.org

microsoft windows

logon bypass

vulnerability

update rollup 1

domain name

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.8%

JSON

Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name (FQDN) is 8 characters long.

References

support.microsoft.com/kb/830847

support.microsoft.com/kb/900345