Lucene search

MitreCVE-2002-0310

HistoryMay 31, 2002 - 4:00 a.m.

CVE-2002-0310

2002-05-3104:00:00

mitre

web.nvd.nist.gov

netwin webnews

default credentials

password security

remote attack

cve-2002-0310

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.012

Percentile

85.4%

JSON

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.

Affected configurations

Nvd

Node

netwinwebnewsMatch1.1h

netwinwebnewsMatch1.1i

netwinwebnewsMatch1.1j

netwinwebnewsMatch1.1k

VendorProductVersionCPE
netwinwebnews1.1hcpe:2.3:a:netwin:webnews:1.1h:*:*:*:*:*:*:*
netwinwebnews1.1icpe:2.3:a:netwin:webnews:1.1i:*:*:*:*:*:*:*
netwinwebnews1.1jcpe:2.3:a:netwin:webnews:1.1j:*:*:*:*:*:*:*
netwinwebnews1.1kcpe:2.3:a:netwin:webnews:1.1k:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netwin	webnews	1.1h	cpe:2.3:a:netwin:webnews:1.1h:::::::*
netwin	webnews	1.1i	cpe:2.3:a:netwin:webnews:1.1i:::::::*
netwin	webnews	1.1j	cpe:2.3:a:netwin:webnews:1.1j:::::::*
netwin	webnews	1.1k	cpe:2.3:a:netwin:webnews:1.1k:::::::*

References

marc.info/?l=bugtraq&m=101432236729631&w=2

www.securityfocus.com/bid/4156

exchange.xforce.ibmcloud.com/vulnerabilities/8255

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.012

Percentile

85.4%

JSON

Related for CVE-2002-0310