CVE-2002-2132

Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html	Broken Link
http://www.iss.net/security_center/static/10957.php	Broken Link
http://www.securityfocus.com/bid/6483	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_2000:::::datacenter_server:::*
	cpe:2.3:o:microsoft:windows_2000:::::professional:::*
	cpe:2.3:o:microsoft:windows_2000:::::server:::*
	cpe:2.3:o:microsoft:windows_2000::::ja:server:::
	cpe:2.3:o:microsoft:windows_2000::sp1:::advanced_server:::
	cpe:2.3:o:microsoft:windows_2000::sp1:::datacenter_server:::
	cpe:2.3:o:microsoft:windows_2000::sp1:::professional:::
	cpe:2.3:o:microsoft:windows_2000::sp1:::server:::
	cpe:2.3:o:microsoft:windows_2000::sp2:::advanced_server:::
	cpe:2.3:o:microsoft:windows_2000::sp2:::datacenter_server:::
	cpe:2.3:o:microsoft:windows_2000::sp2:::professional:::
	cpe:2.3:o:microsoft:windows_2000::sp2:::server:::
	cpe:2.3:o:microsoft:windows_2000::sp3:::advanced_server:::
	cpe:2.3:o:microsoft:windows_2000::sp3:::datacenter_server:::
	cpe:2.3:o:microsoft:windows_2000::sp3:::professional:::
	cpe:2.3:o:microsoft:windows_2000::sp3:::server:::
	cpe:2.3:o:microsoft:windows_xp:::::::x64:*
	cpe:2.3:o:microsoft:windows_xp:::::home:::*
	cpe:2.3:o:microsoft:windows_xp::gold:::professional:::
	cpe:2.3:o:microsoft:windows_xp::sp1:::::x64:
	cpe:2.3:o:microsoft:windows_xp::sp1:::home:::

History

No history.

Information

Published : 2002-12-31 05:00

Updated : 2023-12-10 10:17

NVD link : CVE-2002-2132

Mitre link : CVE-2002-2132

CVE.ORG link : CVE-2002-2132

JSON object : View

Products Affected

microsoft

windows_2000
windows_xp

CWE

NVD-CWE-Other

{"id": "CVE-2002-2132", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-12-31T05:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/10957.php", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/6483", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes."}], "lastModified": "2017-11-21T19:26:45.230", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:datacenter_server:*:*:*", "vulnerable": true, "matchCriteriaId": "28628E93-4651-4857-A706-DE6FD3580C67"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "ECC01F98-D6F4-4E85-A955-073E60E90AE8"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:server:*:*:*", "vulnerable": true, "matchCriteriaId": "6BBE75E4-3013-4AC2-A6E9-DAB402644335"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:ja:server:*:*:*", "vulnerable": true, "matchCriteriaId": "CE1C0272-4570-4F11-8414-12CB9D3BCEE4"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:advanced_server:*:*:*", "vulnerable": true, "matchCriteriaId": "FD093703-ADE8-4E8A-A709-FCDD038C7D35"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:datacenter_server:*:*:*", "vulnerable": true, "matchCriteriaId": "035D5A83-D654-413E-8640-622F29B20DFD"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "A55C505B-9947-4265-AD6C-8DE0523B4D01"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:server:*:*:*", "vulnerable": true, "matchCriteriaId": "E7A27C63-4B55-461B-8383-1A51688027B6"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:advanced_server:*:*:*", "vulnerable": true, "matchCriteriaId": "7614879A-D4A3-47AD-B9ED-BF1215E639A6"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:datacenter_server:*:*:*", "vulnerable": true, "matchCriteriaId": "B0311224-650D-4D20-AF33-59928355F190"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "56694903-F123-4C9B-9DF3-E78482732FE2"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:server:*:*:*", "vulnerable": true, "matchCriteriaId": "29EA0849-935B-4767-B9CE-3896D0975DBF"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:advanced_server:*:*:*", "vulnerable": true, "matchCriteriaId": "27E3BBCC-B815-4512-B786-17FFC1C09297"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:datacenter_server:*:*:*", "vulnerable": true, "matchCriteriaId": "54C7B5CA-D37E-4FDE-A900-B9EAE7ACA65F"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "1A6229F8-7710-44FE-93DA-47AA4E09179E"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:server:*:*:*", "vulnerable": true, "matchCriteriaId": "AA73DF99-991C-4677-AAB7-C19FAB4405D5"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "70C62E91-94D3-4534-985C-8236D71CC10D"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:home:*:*:*", "vulnerable": true, "matchCriteriaId": "9D1BD1B0-6241-4FCE-802C-E5E87CE1B97D"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "1D003AE4-9788-46EB-9D0E-2B20F11BAC64"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "D3B0933F-1AAB-4D68-B85B-A0D917E2A735"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:home:*:*:*", "vulnerable": true, "matchCriteriaId": "BB99BAFD-8F8C-421F-8B44-B3C30B0E35DC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}