Misleading Event ID 1704 in Microsoft Windows 2000 SP4

CVE-2005-3171 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntuser.pol cannot be accessed, which could cause system administrators to believe that the system is compliant with the specified settings.

Learn more about our User Device Pen Test.