CVE-2001-0502 | BDVDB-2026-3510 Detail

Description#

Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-036
http://www.securityfocus.com/bid/2929
http://www.ciac.org/ciac/bulletins/l-101.shtml
https://exchange.xforce.ibmcloud.com/vulnerabilities/6745

Exploit#

No public exploit known

History#

Version 12002-03-09Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.