Vulnerability Details CVE-2002-1184
The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the search path when locating programs during login or application launch from the desktop, which could allow attackers to gain privileges as other users via Trojan horse programs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.7%
CVSS Severity
CVSS v2 Score 4.6
References
- http://www.securityfocus.com/bid/5415
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9779
- http://www.securityfocus.com/bid/5415
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9779
Products affected by CVE-2002-1184
-
cpe:2.3:o:microsoft:windows_2000:-
-
cpe:2.3:o:microsoft:windows_2000:beta3
-
cpe:2.3:o:microsoft:windows_nt:4.0