CVE-2001-0502 Privilege escalation in n/a

What is CVE-2001-0502?

CVE-2001-0502 is a medium-severity vulnerability in Microsoft Windows 2000, published on 9 Mar 2002. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users.

Which versions are affected by CVE-2001-0502?

It affects 1 product.

Products include Microsoft Windows 2000.

How do I fix CVE-2001-0502?

No fix has been published for CVE-2001-0502 yet. Limit exposure of the affected software until one is available.

Is CVE-2001-0502 being exploited?

There is no known exploitation of CVE-2001-0502 in the wild and no public exploit code.

Other vulnerabilities in Microsoft Windows 2000

• CVE-2008-4250 Microsoft Windows Buffer Overflow Exploited Critical 9.8
• CVE-2010-0232 Microsoft Windows Kernel Exception Handler Exploited High 7.8
• CVE-2009-1123 Microsoft Windows Improper Input Validation Exploited High 7.8
• CVE-2002-0367 Microsoft Windows Privilege Escalation Exploited High 7.8
• CVE-2010-0269 Memory corruption in n/a Critical 10.0

All Microsoft Windows 2000 vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wg63-hgm9-2f74.