CVE-2001-0003: Medium severity Microsoft Office vulnerability

Published Feb 12, 2001

Updated

Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.

Affected Software

4 affected components

Microsoft Office=2000

Microsoft Windows 2000

Microsoft Windows ME

Microsoft Windows NT

Remediation

Patch Available

http://www.securityfocus.com/bid/2199

Event History

Feb 12, 2001

CVE Published

05:00 AM

May 7, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0003?

CVE-2001-0003 is rated as a critical vulnerability due to the potential exposure of NTLM credentials.

How do I fix CVE-2001-0003?

To mitigate CVE-2001-0003, ensure that you apply all relevant security updates for Microsoft Office 2000 and Windows 2000.

What systems are affected by CVE-2001-0003?

CVE-2001-0003 affects Microsoft Office 2000, Windows 2000, and Windows Me environments.

What type of attack does CVE-2001-0003 enable?

CVE-2001-0003 allows attackers to obtain NTLM credentials, which can lead to unauthorized access.

Is CVE-2001-0003 still a concern in modern systems?

CVE-2001-0003 primarily affects legacy systems, but if present, it poses a significant security risk.