Lucene search
HistoryApr 22, 2002 - 4:00 a.m.
CVE-2002-0180
cve-2002-0180
webalizer
buffer overflow
reverse dns
remote attack
arbitrary code execution
nvd.
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.057 Low
EPSS
Percentile
93.4%
Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname.
Affected configurations
Node
bradford_barrettwebalizerMatch2.0.1.6
ORbradford_barrettwebalizerMatch2.0.1.9
Related
redhat
redhat
(RHSA-2002:255) webalizer security update
2003-02-06 00:00:00
nvd
nvd
CVE-2002-0180
2002-04-22 04:00:00
CVE-2002-1234
2002-11-04 05:00:00
cvelist
cvelist
CVE-2002-0180
2002-04-18 04:00:00
nessus
nessus
RHEL 2.1 : webalizer (RHSA-2002:255)
2004-07-06 00:00:00
cert
cert
webalizer vulnerable to buffer overflow when performing reverse DNS lookups
2002-10-28 00:00:00
cve
cve
CVE-2002-1234
2002-11-04 05:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.057 Low
EPSS
Percentile
93.4%
Related for CVE-2002-0180