CVE

Id
6514  
CVE No.
CVE-2002-2132  
Status
Candidate  
Description
Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.  
Phase
Assigned (20051116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
36951 6514 CVE-2002-2132 BUGTRAQ:20021226 Full Disclosure: Windows File Protection Old Security Catalog Vulnerability  View
36952 6514 CVE-2002-2132 URL:http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html  View
36953 6514 CVE-2002-2132 XF:wfp-security-catalogs(10957)  View
36954 6514 CVE-2002-2132 URL:http://www.iss.net/security_center/static/10957.php  View
36955 6514 CVE-2002-2132 BID:6483  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64013 JVNDB-2002-000340 Microsoft Windows の Windows File Protection 機能における意図しない権限付与の脆弱性 Microsoft Windows の Windows File Protection には、古いバイナリの信頼のおけるハッシュコードに新しく更新されたバイナリの信頼のおけるハッシュコードと同じ優先順位及び優先権を与えてしまう脆弱性が存在します。 CVE-2002-2132 6514 2.1 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000340.html  View