CVE-2000-0487
The Protected Store in Windows 2000 does not properly select the strongest encryption when...
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability.
Exploit likelihood
What each source reports
NVD Score used
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability.
- Record
CVE-2000-0487- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability.
- Record
CVE-2000-0487- Updated
- 2026-11-02
EUVDEUVD-2000-0485 No score
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability.
- Record
EUVD-2000-0485- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m4m3-6vcg-7fh3 No score
The Protected Store in Windows 2000 does not properly select the strongest encryption when...
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability.
- Record
GHSA-m4m3-6vcg-7fh3- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2000-0487 is a low vulnerability (CVSS 3.6) in Microsoft Windows 2000, published June 1, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.48%, the 84th percentile. No source names a fixed version.