CVE-2000-0487
3.6 · LOWOverview
CVE-2000-0487 is a low-severity vulnerability affecting microsoft windows_2000. It was published on June 1, 2000 and has a CVSS 2.0 base score of 3.6 (LOW).
This vulnerability has a CVSS 2.0 base score of 3.6, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
Technical Description
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability.
Remediation
Check the references section for vendor advisories and patches from microsoft. Update windows_2000 to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|
Frequently Asked Questions
What is CVE-2000-0487?
CVE-2000-0487 is a low-severity vulnerability affecting microsoft windows_2000. It was published on June 1, 2000 and has a CVSS 2.0 base score of 3.6 (LOW).
How severe is CVE-2000-0487?
This vulnerability has a CVSS 2.0 base score of 3.6, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2000-0487?
Check the references section for vendor advisories and patches from microsoft. Update windows_2000 to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2000-0487?
CyberStrike's AI-powered security agents can automatically detect CVE-2000-0487 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related LOW CVEs from 2000
View all →Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local use
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file nam
IRIX crontab creates temporary files with predictable file names and with the umask of the user, whi
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel req
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which a
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if th
Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a deni
The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, w
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kil