CVE-2002-0034: Medium severity Microsoft Windows 2000 vulnerability
The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0034?
CVE-2002-0034 is considered a medium severity vulnerability due to potential exposure of sensitive files with insufficient security permissions.
How do I fix CVE-2002-0034?
To fix CVE-2002-0034, ensure that after converting a FAT32 file system, you manually set the appropriate NTFS permissions on the files and directories.
Which versions of Windows are affected by CVE-2002-0034?
CVE-2002-0034 affects Microsoft Windows 2000 and Windows XP systems.
What could happen if CVE-2002-0034 is exploited?
If CVE-2002-0034 is exploited, it could result in files having less secure permissions, leading to unauthorized access to sensitive data.
Is there a patch available for CVE-2002-0034?
There is no specific patch for CVE-2002-0034; however, following best practices for file permissions can mitigate the risk.