CVE-2002-1932

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16

Description

Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows XP Service Pack 3: all versions

References

http://online.securityfocus.com/archive/1/295341
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B329350
http://www.iss.net/security_center/static/10377.php
http://www.securityfocus.com/bid/5972
http://online.securityfocus.com/archive/1/295341
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B329350
http://www.iss.net/security_center/static/10377.php
http://www.securityfocus.com/bid/5972

Get alerted when CVE-2002-1932 or the next vulnerability affects your stack