CVE-2001-1302
- State
- Published
- Severity
- Not scored
- Published
- Sep 1, 2004
- Updated
- Aug 8, 2024
- Reserved
- May 1, 2002
Description
The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a problem in the NetuserChangePassword function.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20010718 Changing NT/2000 accounts password from the command linemailing-list
- 3063vdb-entry
- win2k-change-network-passwords(6876)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.