CVE-2002-1932
Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do...
Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.
- Record
CVE-2002-1932- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.
- Record
CVE-2002-1932- Updated
- 2026-11-02
EUVDEUVD-2002-1911 No score
Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.
- Record
EUVD-2002-1911- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c9wx-625j-c7mq No score
Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do...
Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.
- Record
GHSA-c9wx-625j-c7mq- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1932 is a high vulnerability (CVSS 7.5) in Microsoft Windows 2000, published December 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.8%, the 96th percentile. No source names a fixed version.
References
online.securityfocus.com/archive/1/295341
securityfocus.com/bid/5972
support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B329350
iss.net/security_center/static/10377.php
nvd.nist.gov/vuln/detail/CVE-2002-1932
github.com/advisories/GHSA-c9wx-625j-c7mq