CVE-2002-1749 json
Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the…
published 2002-12-31 23 y ago modified 2026-06-16 4 mo ago also EUVD-2002-1728
- cvss
- 7.2
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.5%
- EPSS 1.5% chance of exploitation in 30 days, percentile 73%
- public exploits
- 0
- none known
Summary
Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges.
Exploit prediction
1.46% chance of exploitation in the next 30 days, higher than 73% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
References
-
ntbugtraq.com
/default.aspx?pid=36&sid=1&A2=ind0202&L=ntbugtraq&T=0&O=D&F=N&P=5224
mailing-list, vendor-advisory
-
securityfocus.com
/bid/4095
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/8199
vdb-entry
Sources
- CVE List CVE-2002-1749
- NVD CVE-2002-1749
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.