Vulnerability in Microsoft Windows 2000

CVE-2005-3169

Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized activities without detection.

EPSS: 0.032 (86.9th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (vendor-advisory, Patch, x_refsource_MSKB, Vendor Advisory)
  • cve@mitre.org (vendor-advisory, Patch, x_refsource_MSKB, Vendor Advisory)