PT-2004-1124 · Microsoft · Windows 2000+2

Publicado 2004-01-14 · Atualizado 2019-04-30 · CVE-2002-0034

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft CONVERT.EXE versions used on Windows 2000 and Windows XP

Description The issue arises when the Microsoft CONVERT.EXE program is used to convert a FAT32 file system on Windows 2000 and Windows XP systems. It fails to apply the default NTFS permissions during the conversion process, potentially resulting in a file system with less secure permissions than expected.

Recommendations For Windows 2000 and Windows XP systems, manually apply the default NTFS permissions after converting a FAT32 file system using the Microsoft CONVERT.EXE program to ensure the desired level of security.

Correção

Identificadores relacionados

CVE-2002-0034

Produtos afetados

Convert.Exe

Windows 2000

Windows Xp

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2002-0034 · Nota de Segurança
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/361065 · Correção