PT-2002-2168 · Microsoft · Windows 2000

Published 2002-11-12 · Updated 2019-04-30 · CVE-2002-1184

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Windows 2000

Description: The system root folder of Microsoft Windows 2000 has default permissions that allow the Everyone group to have Full access. This could enable attackers to gain privileges as other users via Trojan horse programs, as the system root folder is in the search path when locating programs during login or application launch from the desktop.

Recommendations: For Microsoft Windows 2000, consider restricting the permissions of the Everyone group on the system root folder to minimize the risk of exploitation. As a temporary workaround, monitor the system for any suspicious activity and restrict the execution of programs from untrusted sources. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1184

Affected Products

Windows 2000

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1184 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-064 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9779 · Note
• http://securityfocus.com/bid/5415 · Note