Group Policy Bypass in Microsoft Windows 2000 Terminal Services

CVE-2002-0444

Summary

Microsoft Windows 2000 Terminal Services, including the 90-day trial version, may not enforce group policies when the number of connections to the SYSVOL share reaches its limit, potentially allowing remote authenticated users to bypass established group policies. This flaw could expose sensitive configurations, leading to unauthorized access or privilege escalation.

References