Vulnerability Details CVE-2002-2126
restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 34.6%
CVSS Severity
CVSS v2 Score 2.1
References
- http://archives.neohapsis.com/archives/bugtraq/2002-12/0021.html
- http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0087.html
- http://www.iss.net/security_center/static/10745.php
- http://www.securityfocus.com/bid/6295
- http://archives.neohapsis.com/archives/bugtraq/2002-12/0021.html
- http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0087.html
- http://www.iss.net/security_center/static/10745.php
- http://www.securityfocus.com/bid/6295
Products affected by CVE-2002-2126
-
cpe:2.3:a:pedestal_software:integrity_protection_driver:1.2