Lucene search

K
cveMitreCVE-2002-0919
HistoryOct 04, 2002 - 4:00 a.m.

CVE-2002-0919

2002-10-0404:00:00
mitre
web.nvd.nist.gov
28
cve-2002-0919
cgiscript.net
cspassword.cgi
.htaccess
remote authentication
privilege escalation

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.013

Percentile

86.0%

CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page.

Affected configurations

Nvd
Node
cgiscript.netcspasswordMatch1.0
VendorProductVersionCPE
cgiscript.netcspassword1.0cpe:2.3:a:cgiscript.net:cspassword:1.0:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.013

Percentile

86.0%

Related for CVE-2002-0919