The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2002-12-30 21:00
Updated : 2019-04-30 07:27
NVD link : CVE-2002-2028
Mitre link : CVE-2002-2028
JSON object : View
CWE
Products Affected
microsoft
- windows_xp
- windows_nt
- windows_2000