Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-1888
cve-2002-1888
commonname toolbar
unqualified domain name requests
name resolution
nvd
information security
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.3%
CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names.
Affected configurations
Node
commonnamecommonname_toolbarMatch3.5.2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| commonname:commonname_toolbar | commonname commonname toolbar | eq | 3.5.2.0 |
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.3%
Related for CVE-2002-1888