CVE-2005-1982: Microsoft Windows 2000

Low severity, CVSS 3.6. EPSS: 1.7% chance of exploitation in the next 30 days.

Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 2003 Server: version enterprise only; version r2 only; version standard only; version web only
• Microsoft Windows XP: any version

Published 2005-08-10. Last modified 2026-06-16.