CVEvulnerability
CVE-2001-0003
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-02-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.
Affected configurations
• microsoft office 2000
• microsoft windows 2000
• microsoft windows me
• microsoft windows nt
Related
Referenced by CWE · observed example (1)
- CWE-115 Misinterpretation of Input weakness
References
- http://www.securityfocus.com/bid/2199 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5920 exchange.xforce.ibmcloud.com
- http://www.securityfocus.com/bid/2199 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5920 exchange.xforce.ibmcloud.com