vulnwire
7.5high

CVE-2002-1932in critical feed

Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)"…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
12.8%
percentile 96%
Public exploits
0
none known

Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.

Exploit prediction (EPSS)

12.78% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • online.securityfocus.com /archive/1/295341 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/5972 · vdb-entry, x_refsource_BID, x_transferred
  • support.microsoft.com /default.aspx?scid=kb%3B%5BLN%5D%3B329350 · vendor-advisory, x_refsource_MSKB, x_transferred
  • iss.net /security_center/static/10377.php · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.