PT-2002-2995 · Microsoft · Windows Xp

Published 2002-12-31 · Updated 2017-08-17 · CVE-2002-2283

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP with Fast User Switching (FUS) enabled

Description: The issue allows a user to view processes of other users when the "show processes from all users" privilege is not removed after being taken out of the administrator group.

Recommendations: For Microsoft Windows XP with Fast User Switching (FUS) enabled, manually remove the "show processes from all users" privilege from users who are no longer part of the administrator group to prevent unauthorized access to process information.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2002-2283

Affected Products

Windows Xp

References · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-11/0361.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2283 · Security Note
• http://securityfocus.com/bid/6280 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10736 · Note