CVE-2002-0034

The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399
http://www.kb.cert.org/vuls/id/361065	Patch Third Party Advisory US Government Resource
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399
http://www.kb.cert.org/vuls/id/361065	Patch Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_2000::::::::
	cpe:2.3:o:microsoft:windows_xp::gold:professional:::::

History

20 Nov 2024, 23:38

Type	Values Removed	Values Added
References	~~() http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399 -~~	() http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399 -
References	~~() http://www.kb.cert.org/vuls/id/361065 - Patch, Third Party Advisory, US Government Resource~~	() http://www.kb.cert.org/vuls/id/361065 - Patch, Third Party Advisory, US Government Resource

07 Nov 2023, 01:55

Type	Values Removed	Values Added
References	~~{'url': 'http://support.microsoft.com/default.aspx?scid=kb;[LN];237399', 'name': 'Q237399', 'tags': [], 'refsource': 'MS'}~~	() http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399 -

Information

Published : 2004-02-03 05:00

Updated : 2024-11-20 23:38

NVD link : CVE-2002-0034

Mitre link : CVE-2002-0034

CVE.ORG link : CVE-2002-0034

JSON object : View

Products Affected

microsoft

windows_xp
windows_2000

CWE

NVD-CWE-Other

{"id": "CVE-2002-0034", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-02-03T05:00:00.000", "references": [{"url": "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399", "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/361065", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/361065", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected."}, {"lang": "es", "value": "El program de Microsoft CONVERT.EXE, cuando se usa en sistemas Windows 2000 y Windows XP, no aplica los permisos NTFS por defecto cuando convierte un fichero FAT32, lo que podr\u00eda significar que la conversi\u00f3n produce un sistema de ficheros con permisos menos seguros de lo esperado."}], "lastModified": "2024-11-20T23:38:08.553", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BF263CB-4239-4DB0-867C-9069ED02CAD7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}