Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0495
cve-2002-0495
cssearch 2.3
remote attack
perl code
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
High
0.026 Low
EPSS
Percentile
90.5%
csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi.
Affected configurations
Node
cgiscriptcssearch_professionalRange≤2.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| cgiscript:cssearch_professional | cgiscript cssearch professional | le | 2.3 |
Related
cvelist
cvelist
CVE-2002-0495
2003-04-02 05:00:00
nvd
nvd
CVE-2002-0495
2002-08-12 04:00:00
nessus
nessus
csSearch csSearch.cgi setup Parameter Arbitrary Command Execution
2002-03-27 00:00:00
checkpoint_advisories
checkpoint_advisories
CsSearch csSearch.cgi Arbitrary Command Execution - Ver2 (CVE-2002-0495)
2014-03-03 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
High
0.026 Low
EPSS
Percentile
90.5%
Related for CVE-2002-0495