Lucene search

K
cve[email protected]CVE-2002-0315
HistoryJun 25, 2002 - 4:00 a.m.

CVE-2002-0315

2002-06-2504:00:00
web.nvd.nist.gov
15
information security
cve-2002-0315
fasttrack p2p
remote attack
user spoofing
nvd.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

fasttrack p2p, as used in (1) KaZaA, (2) grokster, and (3) morpheus allows remote attackers to spoof other users by modifying the username and network information in the message header.

Affected configurations

NVD
Node
fasttrackkazaaMatch1.2
OR
fasttrackkazaaMatch1.3
OR
fasttrackkazaaMatch1.3.3
OR
fasttrackkazaaMatch1.4
OR
fasttrackkazaaMatch1.5
OR
grokstergroksterMatch1.3
OR
grokstergroksterMatch1.3.3
OR
music_city_networksmorpheusMatch1.3
OR
music_city_networksmorpheusMatch1.3.3

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

Related for CVE-2002-0315