Lucene search

K
cveMitreCVE-2002-2324
HistoryOct 26, 2007 - 7:00 p.m.

CVE-2002-2324

2007-10-2619:00:00
CWE-264
mitre
web.nvd.nist.gov
29
nvd
cve-2002-2324
windows
xp
acl
security

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

12.7%

The “System Restore” directory and subdirectories, and possibly other subdirectories in the “System Volume Information” directory on Windows XP Professional, have insecure access control list (ACL) permissions, which allows local users to access restricted files and modify registry settings.

Affected configurations

Nvd
Node
microsoftwindows_xp
VendorProductVersionCPE
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

12.7%

Related for CVE-2002-2324