Lucene search

[email protected]CVE-2002-1089

HistoryOct 04, 2002 - 4:00 a.m.

CVE-2002-1089

2002-10-0404:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2002-1089

oracle reports server

rwcgi60

cgi program

sensitive information disclosure

remote attackers

6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.015 Low

EPSS

Percentile

86.9%

JSON

rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks.

CPENameOperatorVersion
oracle:reportsoracle reportseq6.0.8.19
oracle:reportsoracle reportseq6.0.8
oracle:application_serveroracle application servereq9.0.2

CPE	Name	Operator	Version
oracle:reports	oracle reports	eq	6.0.8.19
oracle:reports	oracle reports	eq	6.0.8
oracle:application_server	oracle application server	eq	9.0.2

References

archives.neohapsis.com/archives/bugtraq/2002-07/0203.html

www.iss.net/security_center/static/9628.php

www.securityfocus.com/bid/5262

6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.015 Low

EPSS

Percentile

86.9%

JSON

Related for CVE-2002-1089

nessus1