Lucene search

[email protected]CVE-2002-0900

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0900

2003-04-0205:00:00

[email protected]

web.nvd.nist.gov

cve-2002-0900

buffer overflow

pks

pgp

denial of service

remote attackers

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.8%

JSON

Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup capability.

Affected configurations

NVD

Node

mitpgp_public_key_serverMatch0.9.2

mitpgp_public_key_serverMatch0.9.4

CPENameOperatorVersion
mit:pgp_public_key_servermit pgp public key servereq0.9.2
mit:pgp_public_key_servermit pgp public key servereq0.9.4

CPE	Name	Operator	Version
mit:pgp_public_key_server	mit pgp public key server	eq	0.9.2
mit:pgp_public_key_server	mit pgp public key server	eq	0.9.4

References

online.securityfocus.com/archive/1/274107

www.iss.net/security_center/static/9171.php

www.rubin.ch/pgp/src/patch_buffoverflow20020525

www.securityfocus.com/bid/4828

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.8%

JSON

Related for CVE-2002-0900

nvd1 cvelist1