CVE-2001-0048

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/2133Exploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-099
http://www.securityfocus.com/bid/2133Exploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-099

Timeline

Published: Feb 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-00495.0WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests.CVE-2001-005010.0Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP CVE-2001-00517.5IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain acces CVE-2001-00522.1IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.CVE-2001-005310.0One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.CVE-2001-00545.0Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appen CVE-2001-00555.0CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets.CVE-2001-00567.5The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to g CVE-2001-00575.0Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet.CVE-2001-00585.0The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that doe CVE-2001-00596.2patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-006010.0Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username.