PT-2002-2653 · Microsoft · Windows 2000+1

Publicado 2002-12-31 · Atualizado 2019-04-30 · CVE-2002-1932

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP and Windows 2000

Description The issue concerns a configuration where administrative alerts are sent and the option to not overwrite events is set. In this setup, when the log reaches its maximum size, no notification is sent to the administrator. This allows local users and remote attackers to potentially avoid detection.

Recommendations For Microsoft Windows XP and Windows 2000, consider disabling the "Do not overwrite events (clear log manually)" option to ensure logs are properly managed and notifications are sent when the log reaches its maximum size. Additionally, regularly monitor and clear logs manually to prevent them from reaching maximum size and to ensure administrative alerts are effective.

Correção

Identificadores relacionados

CVE-2002-1932

Produtos afetados

Windows 2000

Windows Xp

Referências · 5

• http://securityfocus.com/bid/5972 · Correção
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B329350 · Aviso do Fabricante
• http://iss.net/security_center/static/10377.php · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2002-1932 · Nota de Segurança
• http://online.securityfocus.com/archive/1/295341 · Nota