Vulnerability in Microsoft Windows 2000
CVE-2005-3168
The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists (ACLs) on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the template.
EPSS: 0.038 (88.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2000
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, Patch, x_refsource_MSKB, Vendor Advisory)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_MSKB, Vendor Advisory)