Description
Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords.
References (3)
Core 3
Core References
Vendor Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/8402.php
Vendor Advisory mailing-list
x_refsource_bugtraq
http://online.securityfocus.com/archive/1/260704
Exploit, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/4256
Scores
EPSS
0.0184
EPSS Percentile
76.9%
Details
Status
published
Products (1)
microsoft/windows_2000
(3 CPE variants)
Published
Jul 26, 2002
Tracked Since
Feb 18, 2026