CVE-2000-1217

no score yetEPSS 1.7%

Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain Account Lockout" vulnerability.

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
Published: 2000-11-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_2000

References

http://www.kb.cert.org/vuls/id/818496
http://www.securityfocus.com/bid/1973
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-089
https://exchange.xforce.ibmcloud.com/vulnerabilities/5585
http://www.kb.cert.org/vuls/id/818496

Check your stack JSON