Lucene search

MitreCVE-2002-0801

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0801

2003-04-0205:00:00

mitre

web.nvd.nist.gov

cve-2002-0801

buffer overflow

isapi

dll

macromedia

jrun 3.1

remote code execution

http

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.174

Percentile

96.1%

JSON

Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.

Affected configurations

Nvd

Node

macromediajrunMatch3.0

macromediajrunMatch3.1

VendorProductVersionCPE
macromediajrun3.0cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*
macromediajrun3.1cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
macromedia	jrun	3.0	cpe:2.3:a:macromedia:jrun:3.0:::::::*
macromedia	jrun	3.1	cpe:2.3:a:macromedia:jrun:3.1:::::::*

References

archives.neohapsis.com/archives/vulnwatch/2002-q2/0085.html

online.securityfocus.com/archive/1/274528

online.securityfocus.com/archive/1/274601

www.cert.org/advisories/CA-2002-14.html

www.iss.net/security_center/static/9194.php

www.kb.cert.org/vuls/id/703835

www.osvdb.org/5082

www.securityfocus.com/bid/4873

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.174

Percentile

96.1%

JSON

Related for CVE-2002-0801