CVE-2005-3170 describes a vulnerability in the LDAP client of Microsoft Windows 2000 prior to Update Rollup 1 for SP4, where it improperly accepts untrusted certificates during LDAPS connections. This flaw could enable attackers to spoof legitimate sites, misleading users into believing they are interacting with a trusted entity. The vulnerability carries a CVSS score of 5.0 (Medium), indicating a network-based attack with high complexity, requiring user interaction, and potentially leading to low impacts on confidentiality, integrity, and availability. Its CWE classification is CWE-295 (Improper Certificate Validation). Despite its age, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are virtually nonexistent, suggesting it has received minimal attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:H/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.