PT-2002-2591 · Microsoft+1 · Event Viewer+1

Published 2002-12-31 · Updated 2024-02-15 · CVE-2002-1869

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Heysoft EventSave versions 5.1 through 5.2 Heysoft EventSave+ versions 5.1 through 5.2

Description The issue allows attackers to prevent events from being recorded by opening the log file using an application such as Microsoft's Event Viewer, because the software does not check whether the log file can be written to.

Recommendations For Heysoft EventSave versions 5.1 through 5.2, consider implementing a check to ensure the log file can be written to before attempting to record events. For Heysoft EventSave+ versions 5.1 through 5.2, consider implementing a check to ensure the log file can be written to before attempting to record events. As a temporary workaround, consider restricting access to the log file to minimize the risk of exploitation.

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2002-1869

Affected Products

Heysoft Eventsave

Event Viewer

References · 6

• http://iss.net/security_center/static/10535.php · Patch
• http://securityfocus.com/bid/6095 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-1869 · Security Note
• http://heysoft.de/nt/eventlog/hsb01e.htm · Patch
• http://securitytracker.com/id?1005517 · Patch
• https://t.me/cvenotify/71653 · Telegram Post