Lucene search
MitreCVE-2002-2132HistoryNov 16, 2005 - 7:37 a.m.
CVE-2002-2132
2005-11-1607:37:00
mitre
web.nvd.nist.gov
28
cve-2002-2132
windows
file protection
wfp
windows 2000
windows xp
security catalog
.cat files
vulnerability
hash codes
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
37.8%
Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.
Affected configurations
Node
microsoftwindows_2000datacenter_server
ORmicrosoftwindows_2000professional
ORmicrosoftwindows_2000server
ORmicrosoftwindows_2000jaserver
ORmicrosoftwindows_2000sp1advanced_server
ORmicrosoftwindows_2000sp1datacenter_server
ORmicrosoftwindows_2000sp1professional
ORmicrosoftwindows_2000sp1server
ORmicrosoftwindows_2000sp2advanced_server
ORmicrosoftwindows_2000sp2datacenter_server
ORmicrosoftwindows_2000sp2professional
ORmicrosoftwindows_2000sp2server
ORmicrosoftwindows_2000sp3advanced_server
ORmicrosoftwindows_2000sp3datacenter_server
ORmicrosoftwindows_2000sp3professional
ORmicrosoftwindows_2000sp3server
ORmicrosoftwindows_xpx64
ORmicrosoftwindows_xphome
ORmicrosoftwindows_xpgoldprofessional
ORmicrosoftwindows_xpsp1x64
ORmicrosoftwindows_xpsp1home
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:*:*:*:datacenter_server:*:*:* |
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:*:*:*:professional:*:*:* |
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:*:*:*:server:*:*:* |
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:*:*:ja:server:*:*:* |
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:advanced_server:*:*:* |
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:datacenter_server:*:*:* |
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:professional:*:*:* |
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:server:*:*:* |
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:advanced_server:*:*:* |
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:datacenter_server:*:*:* |
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
37.8%
Related for CVE-2002-2132