PT-2002-3036 · Microsoft · Windows Xp Professional

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2324

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows XP Professional (affected versions not specified)

Description The issue concerns insecure access control list (ACL) permissions in the "System Restore" directory and its subdirectories, as well as possibly other subdirectories in the "System Volume Information" directory. This allows local users to access restricted files and modify registry settings.

Recommendations For Windows XP Professional, consider restricting access to the "System Restore" directory and its subdirectories, as well as other sensitive subdirectories in the "System Volume Information" directory, to prevent local users from accessing restricted files and modifying registry settings. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2002-2324

Produtos afetados

Windows Xp Professional

Referências · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-10/0070.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2324 · Nota de Segurança
• http://iss.net/security_center/static/10279.php · Nota
• http://securityfocus.com/bid/5894 · Nota