First published: Tue Dec 31 2002(Updated: )
restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Pedestal Software Integrity Protection Driver | =1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-2126 is considered a low severity vulnerability, as it requires local access to exploit.
CVE-2002-2126 allows local users to exploit the delay in driver installation by manipulating the system clock.
CVE-2002-2126 affects users of the Integrity Protection Driver version 1.2 by Pedestal Software.
To protect against CVE-2002-2126, ensure that the Integrity Protection Driver is not used or is updated to a newer version that mitigates this issue.
The impact of CVE-2002-2126 is that it allows local users to install malicious code during a delay in driver installation.