CVE-2005-3175: Microsoft Windows 2000

High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days.

Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator.

Affected products

• Microsoft Windows 2000: any version

Published 2005-10-06. Last modified 2026-06-16.