CVE-2002-1325

Description

Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."

Affected products

• microsoft / windows_2000
• microsoft / windows_2000
• microsoft / windows_2000
• microsoft / windows_2000
• microsoft / windows_2000_terminal_services
• microsoft / windows_2000_terminal_services
• microsoft / windows_2000_terminal_services
• microsoft / windows_2000_terminal_services
• microsoft / windows_95
• microsoft / windows_95
• microsoft / windows_98
• microsoft / windows_98se
• microsoft / windows_me
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_xp
• microsoft / windows_xp

References

• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069
• MISChttp://www.securityfocus.com/bid/6380