CVE-2005-3170

5.0 mediumEPSS 1.0%

Medium (5.0) in microsoft windows 2000. EPSS 1.0% chance of exploitation in the next 30 days.

The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site.

Severity

CVSS 3.1

5.0 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2005-10-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_2000

References

http://support.microsoft.com/kb/883639
http://support.microsoft.com/kb/900345
http://support.microsoft.com/kb/883639
http://support.microsoft.com/kb/900345

Check your stack JSON