CVE-2002-0444: High severity Microsoft Windows 2000 Terminal Services vulnerability
Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0444?
CVE-2002-0444 is regarded as a moderate severity vulnerability that can lead to unauthorized access to group policies.
How do I fix CVE-2002-0444?
To fix CVE-2002-0444, ensure that the number of connections to the SYSVOL share is below the maximum limit.
Who is affected by CVE-2002-0444?
CVE-2002-0444 affects Microsoft Windows 2000 Terminal Services users, particularly those using the trial version.
What are the consequences of CVE-2002-0444?
The consequence of CVE-2002-0444 is that incoming users may not receive group policies, leading to inconsistent security settings.
Is CVE-2002-0444 still relevant today?
While CVE-2002-0444 is an older vulnerability, systems running unpatched versions of Windows 2000 Terminal Services could still be at risk.