Skip to content
OpenAdvisories
Unscored CVE-2002-2028 EUVD-2002-2007GHSA-4xg4-rgg3-px2c

The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is …

Published Jul 14, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing.

References