CVE-2002-1325: Medium severity microsoft windows nt vulnerability
Published Dec 23, 2002
·Updated
Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."
Affected Software
43 affected components
Microsoft Windows 2000
Microsoft Windows 2000=sp1
Microsoft Windows 2000=sp2
Microsoft Windows 2000=sp3
Microsoft Windows 2000 Terminal Services
Microsoft Windows 2000 Terminal Services=sp1
Microsoft Windows 2000 Terminal Services=sp2
Microsoft Windows 2000 Terminal Services=sp3
Microsoft Windows 95
Microsoft Windows 95=sr2
Microsoft Windows 98=gold
Microsoft Windows 98SE
Microsoft Windows Me
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp6a
Microsoft Windows XP=gold
Microsoft Windows XP=sp1
Event History
Dec 23, 2002
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1325?
CVE-2002-1325 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2002-1325?
To fix CVE-2002-1325, ensure that you update your Microsoft Virtual Machine to a version that is not vulnerable.
3
What vulnerabilities does CVE-2002-1325 expose?
CVE-2002-1325 exposes the local user's username through a Java applet accessing the user.dir system property.
4
Which operating systems are affected by CVE-2002-1325?
CVE-2002-1325 affects various versions of Microsoft Windows NT, Windows 2000, and Windows XP.
5
Is CVE-2002-1325 still a concern in modern systems?
CVE-2002-1325 is generally not a concern in modern systems, as these older operating systems are no longer widely used or supported.