Lucene search

MitreCVE-2002-0845

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0845

2003-04-0205:00:00

mitre

web.nvd.nist.gov

cve-2002-0845

buffer overflow

sun one

iplanet web server

remote code execution

http request

chunked transfer encoding

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.052

Percentile

93.0%

JSON

Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.

Affected configurations

Nvd

Node

iplanetiplanet_web_serverMatch4.1

iplanetiplanet_web_serverMatch6.0

VendorProductVersionCPE
iplanetiplanet_web_server4.1cpe:2.3:a:iplanet:iplanet_web_server:4.1:*:*:*:*:*:*:*
iplanetiplanet_web_server6.0cpe:2.3:a:iplanet:iplanet_web_server:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
iplanet	iplanet_web_server	4.1	cpe:2.3:a:iplanet:iplanet_web_server:4.1:::::::*
iplanet	iplanet_web_server	6.0	cpe:2.3:a:iplanet:iplanet_web_server:6.0:::::::*

References

marc.info/?l=bugtraq&m=102890933623192&w=2

www.iss.net/security_center/static/9799.php

www.securityfocus.com/bid/5433

www.sun.com/service/support/software/iplanet/alerts/transferencodingalert-23july2002.html

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.052

Percentile

93.0%

JSON

Related for CVE-2002-0845