PT-2002-2852 · Microsoft · Windows 2000+2

Published 2002-12-31 · Updated 2017-11-21 · CVE-2002-2132

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Windows 2000 and XP

Description: The issue concerns Windows File Protection (WFP) not removing old security catalog .CAT files, potentially allowing local users to replace new files with vulnerable old files that have valid hash codes.

Recommendations: For Windows 2000 and XP, manually remove old security catalog .CAT files to prevent exploitation.

Fix

Related Identifiers

CVE-2002-2132

Affected Products

Windows 2000

Windows File Protection

Windows Xp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-2132 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html · Note
• http://securityfocus.com/bid/6483 · Note
• http://iss.net/security_center/static/10957.php · Note