How severe is CVE-2002-0444?

CVE-2002-0444 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2002-0444 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2002-0444?

CVE-2002-0444 primarily affects Microsoft Windows 2000 Terminal Services. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2002-0444?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2002-0444 published?

CVE-2002-0444 was published on 2002-07-26 and last updated on 2026-06-16.

CVE-2002-0444

CVE-2002-0444 is a high-severity vulnerability in Microsoft Windows 2000 Terminal Services with a CVSS 2.0 base score of 7.5. Its EPSS exploit-prediction score of 12% places it in the 96th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: High (CVSS 2.0 base score 7.5)
EPSS exploit prediction: 12% (96th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Microsoft Windows 2000 Terminal Services
Published: 2002-07-26
Last modified: 2026-06-16

Description

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies.

Frequently asked questions

What is CVE-2002-0444?: Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies.
How severe is CVE-2002-0444?: CVE-2002-0444 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2002-0444 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2002-0444?: CVE-2002-0444 primarily affects Microsoft Windows 2000 Terminal Services. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2002-0444?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2002-0444 published?: CVE-2002-0444 was published on 2002-07-26 and last updated on 2026-06-16.

References

Affected products (3)

cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*

More vulnerabilities in Microsoft Windows 2000 Terminal Services

CVE-2002-1257 — Critical (CVSS 10.0): Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by…
CVE-2005-1212 — High (CVSS 7.5): Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute…
CVE-2003-0111 — High (CVSS 7.5): The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and…
CVE-2003-0109 — High (CVSS 7.5): Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and…
CVE-2003-0010 — High (CVSS 7.5): Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various…
CVE-2003-0003 — High (CVSS 7.5): Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition,…

All CVEs affecting Microsoft Windows 2000 Terminal Services →