← Vulnerability feed

Vulnerability record · CVE-2002-1933 · published 31 December 2002

CVE-2002-1933: Microsoft windows 2000 terminal services vulnerability

Microsoft · Windows 2000 Terminal Services

The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.

7.2 CVSS 2.0 High EPSS 1.6% · top 24.8%
7.2CVSS 2.0 base score
1.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://online.securityfocus.com/archive/1/288415
http://www.iss.net/security_center/static/9946.php
http://www.securityfocus.com/bid/5535
http://online.securityfocus.com/archive/1/288415
http://www.iss.net/security_center/static/9946.php
http://www.securityfocus.com/bid/5535

Track CVE-2002-1933 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2002-1257Microsoft windows 2000 vulnerabilityMicrosoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that i…EPSS 15%7.5CVE-2005-1212Microsoft windows 2000 vulnerabilityBuffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link fil…EPSS 25%7.5CVE-2003-0111Microsoft virtual machine vulnerabilityThe ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote…EPSS 37%7.5CVE-2003-0109Windows ntdll.dll buffer overflow via WebDAV requestA buffer overflow in ntdll.dll affects Windows NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP, and can be triggered remotely th…EPSS 86%analysed7.5CVE-2003-0010Microsoft windows 2000 vulnerabilityInteger overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allo…EPSS 24%7.5CVE-2003-0003Microsoft windows 2000 terminal services vulnerabilityBuffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows …EPSS 43%7.5CVE-2002-1260Microsoft windows 2000 vulnerabilityThe Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks an…EPSS 16%7.5CVE-2002-1214Microsoft PPTP Service buffer overflow on Windows XP and 2000The Microsoft PPTP Service on Windows XP and Windows 2000 contains a buffer overflow triggered by a PPTP packet with malformed control data. A remote…EPSS 51%analysed

Source: NIST National Vulnerability Database (record CVE-2002-1933), CISA KEV, FIRST EPSS (scores of 2026-10-07). This page is refreshed as NVD updates the record.