Vulnerability Details CVE-2000-1217
Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain Account Lockout" vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 75.1%
CVSS Severity
CVSS v2 Score 4.6
References
- http://www.kb.cert.org/vuls/id/818496
- http://www.securityfocus.com/bid/1973
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-089
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5585
- http://www.kb.cert.org/vuls/id/818496
- http://www.securityfocus.com/bid/1973
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-089
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5585
Products affected by CVE-2000-1217
-
cpe:2.3:o:microsoft:windows_2000:-