PT-2002-2987 · Fortres · Fortres 101

Publicado 2002-12-31 · Atualizado 2017-07-29 · CVE-2002-2275

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Fortres 101 version 4.1

Description: The issue allows local users to bypass Fortres 101 by pressing the Windows and "F" key together for 30 seconds. This action opens multiple windows and eventually causes explorer.exe to crash. As a result, an unrestricted explorer.exe is launched.

Recommendations: For Fortres 101 version 4.1, consider disabling the ability to open multiple windows by pressing the Windows and "F" key together as a temporary workaround until a patch is available. Restrict access to the Windows and "F" key combination to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-2275

Produtos afetados

Fortres 101

Referências · 5

• http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0093.html · Nota
• http://securityfocus.com/bid/6332 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10807 · Nota
• http://securitytracker.com/id?1005766 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2275 · Nota de Segurança