SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2005-3169

Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could…

MEDIUM 5.0EPSS 3.22%

Does this matter?

Lower severity and a low EPSS score (3.22%). Track it; it rarely justifies an emergency change on its own.

Description

Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized activities without detection.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
3.22% probability · 87th percentile
CISA KEV
Not listed
Affected
microsoft/windows 2000
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.