Lucene search

K
cve[email protected]CVE-2002-1183
HistoryDec 11, 2002 - 5:00 a.m.

CVE-2002-1183

2002-12-1105:00:00
NVD-CWE-Other
web.nvd.nist.gov
22
microsoft
windows
certificate validation
security
vulnerability
code execution
identity spoofing

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.524 Medium

EPSS

Percentile

97.6%

Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka “New Variant of Certificate Validation Flaw Could Enable Identity Spoofing” (CAN-2002-0862).

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.524 Medium

EPSS

Percentile

97.6%

Related for CVE-2002-1183