CVE-2005-1982
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows...
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.
Exploit likelihood
What each source reports
NVD Score used
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.
- Record
CVE-2005-1982- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.
- Record
CVE-2005-1982- Updated
- 2026-11-02
EUVDEUVD-2005-1984 No score
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.
- Record
EUVD-2005-1984- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3mpj-92q9-pvw2 No score
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows...
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.
- Record
GHSA-3mpj-92q9-pvw2- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1982 is a low vulnerability (CVSS 3.6) in Microsoft Windows 2000, published August 10, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.70%, the 77th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100104
secunia.com/advisories/16368
securityfocus.com/bid/14520
Show 7 moreShow less
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-042
kb.cert.org/vuls/id/477341
securitytracker.com/id?1014642
nvd.nist.gov/vuln/detail/CVE-2005-1982
github.com/advisories/GHSA-3mpj-92q9-pvw2