Lucene search

K
cve[email protected]CVE-2002-2324
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-2324

2022-10-0316:23:49
CWE-264
web.nvd.nist.gov
23
nvd
cve-2002-2324
windows
xp
acl
security

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.9%

The “System Restore” directory and subdirectories, and possibly other subdirectories in the “System Volume Information” directory on Windows XP Professional, have insecure access control list (ACL) permissions, which allows local users to access restricted files and modify registry settings.

Affected configurations

NVD
Node
microsoftwindows_xp

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.9%

Related for CVE-2002-2324