Vulnerability in Microsoft Windows 2000
CVE-2002-1184
The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the search path when locating programs during login or application launch from the desktop, which could allow attackers to gain privileges as other users via Trojan horse programs.
EPSS: 0.019 (77.5th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2000
- Microsoft Windows_nt — versions 4.0
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)