Insecure Permission Check in Windows 2000 LDAP Server Allows Unauthorized Password Modification

CVE-2001-0502 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users.

Learn more about our Cis Benchmark Audit For Server Software.