« Back to list

CVE-2002-2132

Status: ModifiedLow (2.1)—

Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (2)

Microsoft — Windows 2000Microsoft — Windows XP

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2002-2132",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html",
      "tags": [
        "Broken Link"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/10957.php",
      "tags": [
        "Broken Link"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/6483",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/10957.php",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/6483",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes."
    }
  ],
  "lastModified": "2026-06-16T22:00:42.910",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:datacenter_server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28628E93-4651-4857-A706-DE6FD3580C67"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:professional:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECC01F98-D6F4-4E85-A955-073E60E90AE8"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BBE75E4-3013-4AC2-A6E9-DAB402644335"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:ja:server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE1C0272-4570-4F11-8414-12CB9D3BCEE4"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:advanced_server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD093703-ADE8-4E8A-A709-FCDD038C7D35"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:datacenter_server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "035D5A83-D654-413E-8640-622F29B20DFD"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:professional:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A55C505B-9947-4265-AD6C-8DE0523B4D01"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7A27C63-4B55-461B-8383-1A51688027B6"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:advanced_server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7614879A-D4A3-47AD-B9ED-BF1215E639A6"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:datacenter_server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0311224-650D-4D20-AF33-59928355F190"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:professional:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56694903-F123-4C9B-9DF3-E78482732FE2"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "29EA0849-935B-4767-B9CE-3896D0975DBF"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:advanced_server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27E3BBCC-B815-4512-B786-17FFC1C09297"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:datacenter_server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54C7B5CA-D37E-4FDE-A900-B9EAE7ACA65F"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:professional:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A6229F8-7710-44FE-93DA-47AA4E09179E"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:server:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA73DF99-991C-4677-AAB7-C19FAB4405D5"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:x64:*",
              "vulnerable": true,
              "matchCriteriaId": "70C62E91-94D3-4534-985C-8236D71CC10D"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:home:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D1BD1B0-6241-4FCE-802C-E5E87CE1B97D"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:professional:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D003AE4-9788-46EB-9D0E-2B20F11BAC64"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:x64:*",
              "vulnerable": true,
              "matchCriteriaId": "D3B0933F-1AAB-4D68-B85B-A0D917E2A735"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:home:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB99BAFD-8F8C-421F-8B44-B3C30B0E35DC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}