Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0737
cve-2002-0737
sambar web server
source code disclosure
denial of service
dos devices
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.05 Low
EPSS
Percentile
92.9%
Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (resource exhaustion) via DOS devices, using a URL that ends with a space and a null character.
Affected configurations
Node
sambarsambar_serverMatch5.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| sambar:sambar_server | sambar sambar server | eq | 5.1 |
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.05 Low
EPSS
Percentile
92.9%
Related for CVE-2002-0737