Lucene search

MitreCVE-2002-0455

HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0455

2002-08-1204:00:00

mitre

web.nvd.nist.gov

cve-2002-0455

incredimail

pathname vulnerability

software exploit

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

56.7%

JSON

IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.

Affected configurations

Nvd

Node

incredimailincredimailMatchbuild_560

incredimailincredimailMatchbuild_618

incredimailincredimailMatchbuild_1400185

VendorProductVersionCPE
incredimailincredimailbuild_560cpe:2.3:a:incredimail:incredimail:build_560:*:*:*:*:*:*:*
incredimailincredimailbuild_618cpe:2.3:a:incredimail:incredimail:build_618:*:*:*:*:*:*:*
incredimailincredimailbuild_1400185cpe:2.3:a:incredimail:incredimail:build_1400185:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
incredimail	incredimail	build_560	cpe:2.3:a:incredimail:incredimail:build_560:::::::*
incredimail	incredimail	build_618	cpe:2.3:a:incredimail:incredimail:build_618:::::::*
incredimail	incredimail	build_1400185	cpe:2.3:a:incredimail:incredimail:build_1400185:::::::*

References

www.iss.net/security_center/static/8460.php

www.securityfocus.com/archive/1/262262

www.securityfocus.com/bid/4297

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

56.7%

JSON

Related for CVE-2002-0455