CVE-2002-0443: Medium severity Microsoft Windows 2000 vulnerability
Published Jul 26, 2002
·Updated
Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords.
Affected Software
3 affected components
Microsoft Windows 2000
Microsoft Windows 2000=sp2
Microsoft Windows 2000=sp1
Event History
Jul 26, 2002
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0443?
CVE-2002-0443 is considered a moderate severity vulnerability as it allows local users to bypass password reuse policies.
2
How do I fix CVE-2002-0443?
To mitigate CVE-2002-0443, ensure that password policies are properly enforced and consider using a more secure authentication method.
3
Who is affected by CVE-2002-0443?
Users of Microsoft Windows 2000, especially those using service packs 1 and 2, are affected by CVE-2002-0443.
4
What type of vulnerability is CVE-2002-0443?
CVE-2002-0443 is an authentication vulnerability that allows users to reuse old passwords.
5
Can CVE-2002-0443 be exploited remotely?
No, CVE-2002-0443 can only be exploited by local users who have access to the system.