Vulnerability Details CVE-2001-0502
Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.5%
CVSS Severity
CVSS v2 Score 4.6
References
- http://www.ciac.org/ciac/bulletins/l-101.shtml
- http://www.securityfocus.com/bid/2929
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-036
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6745
- http://www.ciac.org/ciac/bulletins/l-101.shtml
- http://www.securityfocus.com/bid/2929
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-036
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6745
Products affected by CVE-2001-0502
-
cpe:2.3:o:microsoft:windows_2000:-
-
cpe:2.3:o:microsoft:windows_2000:beta3