Lucene search

MitreCVE-2003-1265

HistoryNov 16, 2005 - 7:37 a.m.

CVE-2003-1265

2005-11-1607:37:00

mitre

web.nvd.nist.gov

netscape

mozilla

vulnerability

local access

deleted messages

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

Percentile

5.1%

JSON

Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the ‘Empty Trash’ option, which could allow local users to access deleted messages.

Affected configurations

Nvd

Node

mozillamozillaMatch5.0

netscapenavigatorMatch7.0

VendorProductVersionCPE
mozillamozilla5.0cpe:2.3:a:mozilla:mozilla:5.0:*:*:*:*:*:*:*
netscapenavigator7.0cpe:2.3:a:netscape:navigator:7.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	mozilla	5.0	cpe:2.3:a:mozilla:mozilla:5.0:::::::*
netscape	navigator	7.0	cpe:2.3:a:netscape:navigator:7.0:::::::*

References

archives.neohapsis.com/archives/bugtraq/2002-12/0277.html

www.iss.net/security_center/static/10963.php

www.securityfocus.com/bid/6499

www.securitytracker.com/id?1005871

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2003-1265