CVE-2002-2028 in Windows

Riassunto

di MITRE

The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 14/07/2005
• Divulgazione: 31/12/2002
• Moderazione: accettato
• Voce: VDB-19670
• CPE: pronto
• CWE: CWE-287 (confermato)
• CVSS: 3.3 (VulDB)
• EPSS: 0.01971
• KEV: no
• Attività: molto basso
• Settore: Government, Hospital, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2028
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2028
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2028/