What is the severity of CVE-2002-0444?

CVE-2002-0444 is regarded as a moderate severity vulnerability that can lead to unauthorized access to group policies.

How do I fix CVE-2002-0444?

To fix CVE-2002-0444, ensure that the number of connections to the SYSVOL share is below the maximum limit.

Who is affected by CVE-2002-0444?

CVE-2002-0444 affects Microsoft Windows 2000 Terminal Services users, particularly those using the trial version.

What are the consequences of CVE-2002-0444?

The consequence of CVE-2002-0444 is that incoming users may not receive group policies, leading to inconsistent security settings.

Is CVE-2002-0444 still relevant today?

While CVE-2002-0444 is an older vulnerability, systems running unpatched versions of Windows 2000 Terminal Services could still be at risk.

Vulnerability/
CVE-2002-0444

high

7.5

CWE

NVD-CWE-Other

26/7/2002

1/9/2004

8/8/2024

CVE-2002-0444

First published: Fri Jul 26 2002(Updated: )

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Microsoft Windows Terminal Services	=sp1
Microsoft Windows Terminal Services
Microsoft Windows Terminal Services	=sp2

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2002-0444?
CVE-2002-0444 is regarded as a moderate severity vulnerability that can lead to unauthorized access to group policies.
How do I fix CVE-2002-0444?
To fix CVE-2002-0444, ensure that the number of connections to the SYSVOL share is below the maximum limit.
Who is affected by CVE-2002-0444?
CVE-2002-0444 affects Microsoft Windows 2000 Terminal Services users, particularly those using the trial version.
What are the consequences of CVE-2002-0444?
The consequence of CVE-2002-0444 is that incoming users may not receive group policies, leading to inconsistent security settings.
Is CVE-2002-0444 still relevant today?
While CVE-2002-0444 is an older vulnerability, systems running unpatched versions of Windows 2000 Terminal Services could still be at risk.

agent/type
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/severity
agent/references
agent/weakness
agent/last-modified-date
agent/author
agent/event
agent/description
agent/source
agent/tags
agent/softwarecombine
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/microsoft
canonical/microsoft windows terminal services
version/microsoft windows terminal services/sp1
version/microsoft windows terminal services/sp2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.