Vulnerability in Microsoft Windows 2000

CVE-2000-0487

The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability.

EPSS: 0.025 (82.9th percentile) — read the EPSS interpretation.

Affected products

References