PT-2002-3036 · Microsoft · Windows Xp Professional

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2324

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows XP Professional (affected versions not specified)

Description The issue concerns insecure access control list (ACL) permissions in the "System Restore" directory and its subdirectories, as well as possibly other subdirectories in the "System Volume Information" directory. This allows local users to access restricted files and modify registry settings.

Recommendations For Windows XP Professional, consider restricting access to the "System Restore" directory and its subdirectories, as well as other sensitive subdirectories in the "System Volume Information" directory, to prevent local users from accessing restricted files and modifying registry settings. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2002-2324

Affected Products

Windows Xp Professional

References · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-10/0070.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2324 · Security Note
• http://iss.net/security_center/static/10279.php · Note
• http://securityfocus.com/bid/5894 · Note