CVE Feed

    Dashboard / CVE / CVE-2002-0444

    CVE-2002-0444

    Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies.

    Published:Jul 26, 2002
    Last Modified:Apr 16, 2026
    EPS:Sep 1, 2004
    EPSS Score:0.09297
    CVSS Score:7.5

    Affected Products

    Vendor
    Microsoft
    Product
    Windows 2000 Terminal Services

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2005-1214 (CVSS 5.1) — Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disgui…
    CVE-2005-1212 (CVSS 7.5) — Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute…
    CVE-2003-0496 (CVSS 7.2) — Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by c…
    CVE-2003-0112 (CVSS 4.6) — Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to b…
    CVE-2003-0111 (CVSS 7.5) — The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windo…
    CVE-2002-1561 (CVSS 5) — The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of…
    CVE-2003-0010 (CVSS 7.5) — Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) o…
    CVE-2003-0109 (CVSS 7.5) — Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000…
    CVE-2003-0003 (CVSS 7.5) — Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Editio…
    CVE-2003-0001 (CVSS 5) — Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High