CVE-2002-2283

Microsoft Windows XP - Unauthorized Process Viewing via Fast User Switching Privilege

Title source: llm
STIX 2.1

Description

Microsoft Windows XP with Fast User Switching (FUS) enabled does not remove the "show processes from all users" privilege when the user is removed from the administrator group, which allows that user to view processes of other users.

References (3)

Core 3
Core References
Exploit mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-11/0361.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10736
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6280

Scores

EPSS 0.0162
EPSS Percentile 73.8%

Details

CWE
CWE-264
Status published
Products (1)
microsoft/windows_xp (4 CPE variants)
Published Dec 31, 2002
Tracked Since Feb 18, 2026