NetSight
medium5.0

CVE-2002-1325

Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user…

Impact

Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."

Affected products

VendorProductAffected versions
MicrosoftWindows 2000
All versions
MicrosoftWindows 2000 Terminal Services
All versions
MicrosoftWindows 95
All versions
MicrosoftWindows 98
All versions
MicrosoftWindows 98se
All versions
MicrosoftWindows Me
All versions
MicrosoftWindows Nt
Version 4.0
MicrosoftWindows Xp
All versions

References