CVE-2001-0003

Published: Feb 12, 2001Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.

Affected (4)

Products: Microsoft: Office, Windows 2000, Windows Me, Windows Nt

4 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office	Version 2000

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows Me	All versions
Microsoft Windows Nt	All versions

References (6)

http://www.securityfocus.com/bid/2199

Source: cve@mitre.org

PatchVendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/5920

Source: cve@mitre.org

http://www.securityfocus.com/bid/2199

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/5920

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.