Strix
26.1K

CVE-2005-1982

UnknownEPSS 1.65%

Last modified

CVE-2005-1982 is a vulnerability of currently unknown severity. Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.. EPSS estimates a 1.65% chance of exploitation in the next 30 days.

Description

Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.

Metrics

EPSS Probability
1.65%

73.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
MicrosoftWindows 2000All versions—
MicrosoftWindows 2003 Serverenterprise—
MicrosoftWindows 2003 Serverr2—
MicrosoftWindows 2003 Serverstandard—
MicrosoftWindows 2003 Serverweb—
MicrosoftWindows XpAll versionsGold

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2005-1982?
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.
How severe is CVE-2005-1982?
Severity scoring for CVE-2005-1982 is pending analysis. The EPSS model estimates a 1.65% probability of exploitation in the next 30 days.
How do I fix CVE-2005-1982?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2005-1982?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST