CVE-2005-3175: Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer eve...

Security readout for executives and security teams

This is a legacy Windows 2000 access-control flaw. A local administrator could unlock a workstation that a domain administrator had locked and gain access to that domain administrator's active session. Business urgency depends on whether any Windows 2000 systems still exist and whether privileged admins used them interactively. Exposure is likely limited to environments retaining Windows 2000 systems before Update Rollup 1 for SP4, especially where domain administrators log on locally or leave sessions locked. Prioritize if Windows 2000 remains in production or privileged admins use legacy hosts. Otherwise, treat as a legacy hygiene issue and confirm decommissioning evidence. Mitigation focus: Identify and retire any remaining Windows 2000 systems.; Check Microsoft KB842742 and KB900345 for applicable vendor guidance.; Apply Update Rollup 1 for Windows 2000 SP4 where still supportable..

Prepared

Jun 29, 2026, 17:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.