CVE-2001-0502 — Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users

Back Back to CVE browser

MEDIUM

Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users

Published Mar 9, 2002

4.6

MEDIUM

CVSS 2.0

EPSS 1.82%

Description

Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.82% 0.01820

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01820

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.82% (0.01820)	77.96th	v5 (v2026.06.15)
Jun 15, 2026	1.82% (0.01820)	75.87th	v5 (v2026.06.15)
Mar 17, 2025	0.96% (0.00956)	74.85th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	14.68th	v3 (v2023.03.01)
Jun 7, 2024	0.04% (0.00044)	12.57th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	10.57th	v3 (v2023.03.01)
Mar 6, 2023	2.22% (0.02221)	81.26th	v2 (v2022.01.01)
Apr 1, 2022	2.22% (0.02221)	79.45th	v2 (v2022.01.01)
Feb 4, 2022	2.22% (0.02221)	58.09th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (4)

http://www.ciac.org/ciac/bulletins/l-101.shtml
third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.securityfocus.com/bid/2929
vdb-entryx_refsource_BID
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-036
vendor-advisoryx_refsource_MS
https://exchange.xforce.ibmcloud.com/vulnerabilities/6745
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.ciac.org/ciac/bulletins/l-101.shtml		third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.securityfocus.com/bid/2929		vdb-entryx_refsource_BID
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-036		vendor-advisoryx_refsource_MS
https://exchange.xforce.ibmcloud.com/vulnerabilities/6745		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 9, 2002

Updated Aug 8, 2024

Reserved Jun 8, 2001

Link CVE-2001-0502

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2001-0502

Red Hat

Severity n/a

Public date n/a

Links CVE-2001-0502