CVE-2002-2132

Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_2000:*:*:*:*:datacenter_server:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:*:*:*:professional:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:*:*:*:server:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:*:*:ja:server:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:advanced_server:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:datacenter_server:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:professional:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:server:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:advanced_server:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:datacenter_server:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:professional:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:server:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:advanced_server:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:datacenter_server:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:professional:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:server:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_xp:*:*:*:*:home:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:professional:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:home:*:*:*

History

20 Nov 2024, 23:42

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html - Broken Link () http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html - Broken Link
References () http://www.iss.net/security_center/static/10957.php - Broken Link () http://www.iss.net/security_center/static/10957.php - Broken Link
References () http://www.securityfocus.com/bid/6483 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/6483 - Third Party Advisory, VDB Entry

Information

Published : 2002-12-31 05:00

Updated : 2024-11-20 23:42


NVD link : CVE-2002-2132

Mitre link : CVE-2002-2132

CVE.ORG link : CVE-2002-2132


JSON object : View

Products Affected

microsoft

  • windows_2000
  • windows_xp