Lucene search

[email protected]CVE-2000-0628

HistoryOct 13, 2000 - 4:00 a.m.

CVE-2000-0628

2000-10-1304:00:00

[email protected]

web.nvd.nist.gov

cve-2000-0628

apache

asp module

remote attack

file modification

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.3%

JSON

The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files.

Affected configurations

NVD

Node

joshua_chamasapache_aspMatch0.16

joshua_chamasapache_aspMatch0.17

joshua_chamasapache_aspMatch0.18

joshua_chamasapache_aspMatch1.93

CPENameOperatorVersion
joshua_chamas:apache_aspjoshua chamas apache aspeq0.16
joshua_chamas:apache_aspjoshua chamas apache aspeq0.17
joshua_chamas:apache_aspjoshua chamas apache aspeq0.18
joshua_chamas:apache_aspjoshua chamas apache aspeq1.93

CPE	Name	Operator	Version
joshua_chamas:apache_asp	joshua chamas apache asp	eq	0.16
joshua_chamas:apache_asp	joshua chamas apache asp	eq	0.17
joshua_chamas:apache_asp	joshua chamas apache asp	eq	0.18
joshua_chamas:apache_asp	joshua chamas apache asp	eq	1.93

References

archives.neohapsis.com/archives/bugtraq/2000-07/0142.html

www.nodeworks.com/asp/changes.html

www.securityfocus.com/bid/1457

exchange.xforce.ibmcloud.com/vulnerabilities/4931

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.3%

JSON

Related for CVE-2000-0628

nvd1 nessus1 cvelist1