CVE-2002-2028: Low severity Microsoft Windows 2000 vulnerability
The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2028?
CVE-2002-2028 is considered a high severity vulnerability due to the ease of physical access exploitation.
How do I fix CVE-2002-2028?
To fix CVE-2002-2028, ensure that screensavers are configured to require a password and limit physical access to workstations.
What systems are affected by CVE-2002-2028?
CVE-2002-2028 affects Windows NT 4.0, Windows 2000, Windows XP, and their various service pack versions.
What type of attack can CVE-2002-2028 facilitate?
CVE-2002-2028 can facilitate brute force password guessing attacks when a user has physical access to the device.
Is CVE-2002-2028 still relevant today?
While CVE-2002-2028 primarily affects older operating systems, understanding its implications is important for legacy system management.