CVE-2002-1184: The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access...

Security readout for executives and security teams

CVE-2002-1184 is a Windows 2000 privilege risk. The system root folder could be writable by Everyone and also searched when programs run at login or from the desktop. A malicious program placed there could run in another user’s context. Exposure appears limited to Microsoft Windows 2000 systems using the vulnerable default root-folder permissions. The affected-product metadata in the bundle is incomplete, so validate against asset inventory and Microsoft MS02-064 guidance. Treat this as a legacy-system risk. It is not KEV-listed and has no provided active-exploitation evidence, but remaining Windows 2000 assets should be isolated, remediated, or retired because privilege misuse could compromise shared or administrative environments. Mitigation focus: Review Microsoft MS02-064 for the vendor’s supported remediation guidance.; Identify and retire any remaining Windows 2000 systems where possible.; Restrict write permissions on the system root folder per vendor guidance..

Prepared

Jun 30, 2026, 03:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.