First published: Fri Feb 25 2005(Updated: )
Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been disputed in a followup post.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows XP | =gold | |
Microsoft Windows 2000 | ||
Microsoft Windows 2000 | =sp4 | |
Microsoft Windows 2000 | =sp2 | |
Microsoft Windows 2000 | =sp1 | |
Microsoft Windows 2000 | =sp3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0545 is considered a moderate severity vulnerability due to its potential to bypass security restrictions.
To mitigate CVE-2005-0545, consider implementing stricter group policy settings and updating to a more secure operating system.
CVE-2005-0545 affects users of Microsoft Windows XP Professional SP2 and Windows 2000 Server SP4 running Active Directory.
CVE-2005-0545 is a security vulnerability that allows local users to bypass group policies regulating access to hidden drives.
CVE-2005-0545 is not a remote exploit but rather a local vulnerability that requires physical access to the system.