New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2001-0003

NVDCIRCLENISA

EUVD-2001-0003 · Published Feb 12, 2001

Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.

Technologies

Microsoft Windows MeMicrosoft Windows NtMicrosoft Windows 2000Microsoft Office

Weaknesses

NVD-CWE-Other

CVSS scores

  • v2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot