Lucene search

[email protected]CVE-2002-0532

HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0532

2002-08-1204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2002-0532

emu webmail

local user exploit

arbitrary program execution

http header vulnerability.

7.7 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

EMU Webmail allows local users to execute arbitrary programs via a … (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.

CPENameOperatorVersion
emumail:emumail_unixemumail emumail unixeq5.0
emumail:emumail_red_hat_linuxemumail emumail red hat linuxeq5.0
emumail:emumail_red_hat_linuxemumail emumail red hat linuxeq5.1
emumail:emumail_unixemumail emumail unixeq5.1
emumail:emumailemumaileq3.0

CPE	Name	Operator	Version
emumail:emumail_unix	emumail emumail unix	eq	5.0
emumail:emumail_red_hat_linux	emumail emumail red hat linux	eq	5.0
emumail:emumail_red_hat_linux	emumail emumail red hat linux	eq	5.1
emumail:emumail_unix	emumail emumail unix	eq	5.1
emumail:emumail	emumail	eq	3.0

References

online.securityfocus.com/archive/1/266930

www.iss.net/security_center/static/8836.php

www.osvdb.org/5270

www.securityfocus.com/bid/4488

7.7 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON