PT-2002-2987 · Fortres · Fortres 101

Published 2002-12-31 · Updated 2017-07-29 · CVE-2002-2275

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Fortres 101 version 4.1

Description: The issue allows local users to bypass Fortres 101 by pressing the Windows and "F" key together for 30 seconds. This action opens multiple windows and eventually causes explorer.exe to crash. As a result, an unrestricted explorer.exe is launched.

Recommendations: For Fortres 101 version 4.1, consider disabling the ability to open multiple windows by pressing the Windows and "F" key together as a temporary workaround until a patch is available. Restrict access to the Windows and "F" key combination to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-2275

Affected Products

Fortres 101

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-2275 · Security Note
• http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0093.html · Note
• http://securityfocus.com/bid/6332 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10807 · Note
• http://securitytracker.com/id?1005766 · Note