CVE-2002-1325

Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2002-12-23

Last modified

2024-08-08

Affected products

• Windows 2000 (Microsoft)
• Windows 2000 Terminal Services (Microsoft)
• Windows 95 (Microsoft)
• Windows 98 (Microsoft)
• Windows 98se (Microsoft)
• Windows Me (Microsoft)
• Windows Nt (Microsoft)
• Windows Xp (Microsoft)

References

• http://www.securityfocus.com/bid/6380
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069