PT-2002-2995 · Microsoft · Windows Xp

Publicado 2002-12-31 · Atualizado 2017-08-17 · CVE-2002-2283

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP with Fast User Switching (FUS) enabled

Description: The issue allows a user to view processes of other users when the "show processes from all users" privilege is not removed after being taken out of the administrator group.

Recommendations: For Microsoft Windows XP with Fast User Switching (FUS) enabled, manually remove the "show processes from all users" privilege from users who are no longer part of the administrator group to prevent unauthorized access to process information.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2002-2283

Produtos afetados

Windows Xp

Referências · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-11/0361.html · Exploit
• http://securityfocus.com/bid/6280 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2283 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10736 · Nota