Description
Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/6483
Broken Link vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/10957.php
Broken Link mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html
Scores
EPSS
0.0175
EPSS Percentile
75.7%
Details
Status
published
Products (2)
microsoft/windows_2000
(16 CPE variants)
microsoft/windows_xp
(5 CPE variants)
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026