Skip to content
OpenAdvisories
Unscored CVE-2001-0048 EUVD-2001-0048GHSA-xvj4-j4pc-f2wp

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, whi…

Published Feb 2, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability.

References