Lucene search

[email protected]CVE-2002-1062

HistoryOct 04, 2002 - 4:00 a.m.

CVE-2002-1062

2002-10-0404:00:00

[email protected]

web.nvd.nist.gov

cve-2002-1062

thomas hauck

jana server

remote code execution

signedness error

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.7%

JSON

Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.

Affected configurations

NVD

Node

t._hauckjana_web_serverMatch1.0

t._hauckjana_web_serverMatch1.45

t._hauckjana_web_serverMatch1.46

t._hauckjana_web_serverMatch2.0

t._hauckjana_web_serverMatch2.0_beta1

t._hauckjana_web_serverMatch2.0_beta2

t._hauckjana_web_serverMatch2.2.1

CPENameOperatorVersion
t._hauck:jana_web_servert. hauck jana web servereq1.0
t._hauck:jana_web_servert. hauck jana web servereq1.45
t._hauck:jana_web_servert. hauck jana web servereq1.46
t._hauck:jana_web_servert. hauck jana web servereq2.0
t._hauck:jana_web_servert. hauck jana web servereq2.0_beta1
t._hauck:jana_web_servert. hauck jana web servereq2.0_beta2
t._hauck:jana_web_servert. hauck jana web servereq2.2.1

CPE	Name	Operator	Version
t._hauck:jana_web_server	t. hauck jana web server	eq	1.0
t._hauck:jana_web_server	t. hauck jana web server	eq	1.45
t._hauck:jana_web_server	t. hauck jana web server	eq	1.46
t._hauck:jana_web_server	t. hauck jana web server	eq	2.0
t._hauck:jana_web_server	t. hauck jana web server	eq	2.0_beta1
t._hauck:jana_web_server	t. hauck jana web server	eq	2.0_beta2
t._hauck:jana_web_server	t. hauck jana web server	eq	2.2.1

References

archives.neohapsis.com/archives/bugtraq/2002-07/0329.html

www.iss.net/security_center/static/9684.php

www.securityfocus.com/bid/5321

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.7%

JSON

Related for CVE-2002-1062

nvd1 cvelist1