Lucene search

[email protected]CVE-2002-0310

HistoryMay 31, 2002 - 4:00 a.m.

CVE-2002-0310

2002-05-3104:00:00

[email protected]

web.nvd.nist.gov

netwin webnews

default credentials

password security

remote attack

cve-2002-0310

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.4%

JSON

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.

Affected configurations

NVD

Node

netwinwebnewsMatch1.1h

netwinwebnewsMatch1.1i

netwinwebnewsMatch1.1j

netwinwebnewsMatch1.1k

CPENameOperatorVersion
netwin:webnewsnetwin webnewseq1.1h
netwin:webnewsnetwin webnewseq1.1i
netwin:webnewsnetwin webnewseq1.1j
netwin:webnewsnetwin webnewseq1.1k

CPE	Name	Operator	Version
netwin:webnews	netwin webnews	eq	1.1h
netwin:webnews	netwin webnews	eq	1.1i
netwin:webnews	netwin webnews	eq	1.1j
netwin:webnews	netwin webnews	eq	1.1k

References

marc.info/?l=bugtraq&m=101432236729631&w=2

www.securityfocus.com/bid/4156

exchange.xforce.ibmcloud.com/vulnerabilities/8255

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.4%

JSON

Related for CVE-2002-0310

cvelist1 nvd1