CoreCVE
Back

MEDIUM

The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site

Published Oct 6, 2005

Description

The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-295

Improper Certificate Validation

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Oct 6, 2005
Updated Dec 5, 2024
Reserved Oct 6, 2005
Link CVE-2005-3170
CISA Vulnrichment
Updated Oct 15, 2024
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2005-3170
Red Hat
Severity n/a
Public date n/a
Links CVE-2005-3170