Lucene search

MitreCVE-2002-2065

HistoryJul 14, 2005 - 4:00 a.m.

CVE-2002-2065

2005-07-1404:00:00

mitre

web.nvd.nist.gov

webcalendar

cve-2002-2065

information security

remote attackers

web root

arbitrary include files

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.005

Percentile

75.9%

JSON

WebCalendar 0.9.34 and earlier with ‘browsing in includes directory’ enabled allows remote attackers to read arbitrary include files with .inc extensions from the web root.

Affected configurations

Nvd

Node

webcalendarwebcalendarMatch0.9.31

webcalendarwebcalendarMatch0.9.32

webcalendarwebcalendarMatch0.9.33

webcalendarwebcalendarMatch0.9.34

VendorProductVersionCPE
webcalendarwebcalendar0.9.31cpe:2.3:a:webcalendar:webcalendar:0.9.31:*:*:*:*:*:*:*
webcalendarwebcalendar0.9.32cpe:2.3:a:webcalendar:webcalendar:0.9.32:*:*:*:*:*:*:*
webcalendarwebcalendar0.9.33cpe:2.3:a:webcalendar:webcalendar:0.9.33:*:*:*:*:*:*:*
webcalendarwebcalendar0.9.34cpe:2.3:a:webcalendar:webcalendar:0.9.34:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
webcalendar	webcalendar	0.9.31	cpe:2.3:a:webcalendar:webcalendar:0.9.31:::::::*
webcalendar	webcalendar	0.9.32	cpe:2.3:a:webcalendar:webcalendar:0.9.32:::::::*
webcalendar	webcalendar	0.9.33	cpe:2.3:a:webcalendar:webcalendar:0.9.33:::::::*
webcalendar	webcalendar	0.9.34	cpe:2.3:a:webcalendar:webcalendar:0.9.34:::::::*

References

sourceforge.net/project/shownotes.php?group_id=3870&release_id=93295

www.iss.net/security_center/static/9296.php

www.securityfocus.com/bid/4961

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.005

Percentile

75.9%

JSON

Related for CVE-2002-2065