CVE-2002-0479

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-03/0284.html
http://www.iss.net/security_center/static/8607.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4347Exploit, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-03/0284.html
http://www.iss.net/security_center/static/8607.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4347Exploit, Vendor Advisory

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-048010.0ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a CVE-2002-04815.1An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute J CVE-2002-04825.0Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read a CVE-2002-04835.0index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter CVE-2002-04845.0move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files CVE-2002-04857.5Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition heade CVE-2002-04867.2Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the c CVE-2002-04874.6Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local u CVE-2002-048810.0Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host CVE-2002-048910.0Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in CVE-2002-049010.0Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands v CVE-2002-049110.0admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remo