CVEvulnerability
CVE-2002-2028
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing.
Affected configurations
• microsoft windows 2000
• microsoft windows nt 4.0
• microsoft windows xp
References
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/01/msg00278.html cert.uni-stuttgart.de
- http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq188700 support.microsoft.com
- http://www.heysoft.de/nt/lbh.htm Vendor Advisory
- http://www.securityfocus.com/bid/3933 www.securityfocus.com
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/01/msg00278.html cert.uni-stuttgart.de
- http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq188700 support.microsoft.com
- http://www.heysoft.de/nt/lbh.htm Vendor Advisory
- http://www.securityfocus.com/bid/3933 www.securityfocus.com