CVE-2002-0421

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/259963Vendor Advisory
http://www.iss.net/security_center/static/8388.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4236Patch, Vendor Advisory
http://online.securityfocus.com/archive/1/259963Vendor Advisory
http://www.iss.net/security_center/static/8388.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4236Patch, Vendor Advisory

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-04222.6IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by CVE-2002-042310.0Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly exec CVE-2002-04244.6efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which CVE-2002-04255.0mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message i CVE-2002-04267.5VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via man CVE-2002-042710.0Buffer overflows in fpexec in mod_frontpage before 1.6.1 may allow attackers to gain root privileges.CVE-2002-04287.5Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or CVE-2002-04293.6The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary proces CVE-2002-04303.7MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbi CVE-2002-04315.0XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection.CVE-2002-043210.0Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of servi CVE-2002-04335.0Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character.