PT-2002-2168 · Microsoft · Windows 2000

Publicado 2002-11-12 · Atualizado 2019-04-30 · CVE-2002-1184

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Windows 2000

Description: The system root folder of Microsoft Windows 2000 has default permissions that allow the Everyone group to have Full access. This could enable attackers to gain privileges as other users via Trojan horse programs, as the system root folder is in the search path when locating programs during login or application launch from the desktop.

Recommendations: For Microsoft Windows 2000, consider restricting the permissions of the Everyone group on the system root folder to minimize the risk of exploitation. As a temporary workaround, monitor the system for any suspicious activity and restrict the execution of programs from untrusted sources. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-1184

Produtos afetados

Windows 2000

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/9779 · Nota
• http://securityfocus.com/bid/5415 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1184 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-064 · Aviso do Fabricante