Security Advisory

CVE-2002-0421

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-06-11 04:00:00

Last updated 2024-08-08 02:49:28

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr.

← Browse all CVEs View on cve.org ↗