CVE-2005-1982

Microsoft Windows 2000, XP, and Server 2003 - Information Disclosure and Server Spoofing via PKINIT Protocol MITM

Title source: llm
STIX 2.1

Description

Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100104
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16368/
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100102
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14520
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100098
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100100
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100096
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/477341
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1014642
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100106

Scores

EPSS 0.0170
EPSS Percentile 75.0%

Details

Status published
Products (6)
microsoft/windows_2000
microsoft/windows_2003_server enterprise
microsoft/windows_2003_server r2
microsoft/windows_2003_server standard
microsoft/windows_2003_server web
microsoft/windows_xp
Published Aug 10, 2005
Tracked Since Feb 18, 2026