Lucene search

[email protected]CVE-2002-1060

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-1060

2003-04-0205:00:00

[email protected]

web.nvd.nist.gov

cve-2002-1060

blue coat systems

cacheos

xss

remote code injection

web security

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.1%

JSON

Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page.

Affected configurations

NVD

Node

bluecoatcacheosMatch3.1.17

bluecoatcacheosMatch3.1.18

bluecoatcacheosMatch3.1.19

bluecoatcacheosMatch3.1.21

bluecoatcacheosMatch4.0

bluecoatcacheosMatch4.0.11

bluecoatcacheosMatch4.0.12

bluecoatcacheosMatch4.0.13

bluecoatcacheosMatch4.0.14

bluecoatcacheosMatch4.1.6

CPENameOperatorVersion
bluecoat:cacheosbluecoat cacheoseq3.1.17
bluecoat:cacheosbluecoat cacheoseq3.1.18
bluecoat:cacheosbluecoat cacheoseq3.1.19
bluecoat:cacheosbluecoat cacheoseq3.1.21
bluecoat:cacheosbluecoat cacheoseq4.0
bluecoat:cacheosbluecoat cacheoseq4.0.11
bluecoat:cacheosbluecoat cacheoseq4.0.12
bluecoat:cacheosbluecoat cacheoseq4.0.13
bluecoat:cacheosbluecoat cacheoseq4.0.14
bluecoat:cacheosbluecoat cacheoseq4.1.6

CPE	Name	Operator	Version
bluecoat:cacheos	bluecoat cacheos	eq	3.1.17
bluecoat:cacheos	bluecoat cacheos	eq	3.1.18
bluecoat:cacheos	bluecoat cacheos	eq	3.1.19
bluecoat:cacheos	bluecoat cacheos	eq	3.1.21
bluecoat:cacheos	bluecoat cacheos	eq	4.0
bluecoat:cacheos	bluecoat cacheos	eq	4.0.11
bluecoat:cacheos	bluecoat cacheos	eq	4.0.12
bluecoat:cacheos	bluecoat cacheos	eq	4.0.13
bluecoat:cacheos	bluecoat cacheos	eq	4.0.14
bluecoat:cacheos	bluecoat cacheos	eq	4.1.6

References

archives.neohapsis.com/archives/bugtraq/2002-07/0283.html

download.cacheflow.com/release/CA/4.1.00-docs/CACacheOS41fixes.htm

www.iss.net/security_center/static/9674.php

www.securityfocus.com/bid/5305

www.securityfocus.com/bid/5608

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.1%

JSON

Related for CVE-2002-1060

cvelist1 nvd1 nessus1