Vulnerability Details CVE-2002-1932
Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.215
EPSS Ranking 95.5%
CVSS Severity
CVSS v2 Score 7.5
References
- http://online.securityfocus.com/archive/1/295341
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B329350
- http://www.iss.net/security_center/static/10377.php
- http://www.securityfocus.com/bid/5972
- http://online.securityfocus.com/archive/1/295341
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B329350
- http://www.iss.net/security_center/static/10377.php
- http://www.securityfocus.com/bid/5972
Products affected by CVE-2002-1932
-
cpe:2.3:o:microsoft:windows_2000:-
-
cpe:2.3:o:microsoft:windows_2000:beta3
-
cpe:2.3:o:microsoft:windows_xp:-