Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-2132
cve-2002-2132
windows
file protection
wfp
windows 2000
windows xp
security catalog
.cat files
vulnerability
hash codes
6.8 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
25.0%
Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.
Affected configurations
Node
microsoftwindows_2000datacenter_server
ORmicrosoftwindows_2000professional
ORmicrosoftwindows_2000server
ORmicrosoftwindows_2000jaserver
ORmicrosoftwindows_2000sp1advanced_server
ORmicrosoftwindows_2000sp1datacenter_server
ORmicrosoftwindows_2000sp1professional
ORmicrosoftwindows_2000sp1server
ORmicrosoftwindows_2000sp2advanced_server
ORmicrosoftwindows_2000sp2datacenter_server
ORmicrosoftwindows_2000sp2professional
ORmicrosoftwindows_2000sp2server
ORmicrosoftwindows_2000sp3advanced_server
ORmicrosoftwindows_2000sp3datacenter_server
ORmicrosoftwindows_2000sp3professional
ORmicrosoftwindows_2000sp3server
ORmicrosoftwindows_xpx64
ORmicrosoftwindows_xphome
ORmicrosoftwindows_xpgoldprofessional
ORmicrosoftwindows_xpsp1x64
ORmicrosoftwindows_xpsp1home
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_2000 | microsoft windows 2000 | eq | * |
| microsoft:windows_xp | microsoft windows xp | eq | * |
6.8 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
25.0%
Related for CVE-2002-2132