Lucene search

[email protected]CVE-2002-1600

HistoryMar 13, 2005 - 5:00 a.m.

CVE-2002-1600

2005-03-1305:00:00

[email protected]

web.nvd.nist.gov

security

vulnerability

directory traversal

my classifieds

classifieds.cgi

remote attackers

file overwrite

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

Directory traversal vulnerability in Mike Spice’s My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter.

Affected configurations

NVD

Node

mike_spicemy_classifiedsMatch1.0

mike_spicemy_classifiedsMatch1.1

mike_spicemy_classifiedsMatch1.2

CPENameOperatorVersion
mike_spice:my_classifiedsmike spice my classifiedseq1.0
mike_spice:my_classifiedsmike spice my classifiedseq1.1
mike_spice:my_classifiedsmike spice my classifiedseq1.2

CPE	Name	Operator	Version
mike_spice:my_classifieds	mike spice my classifieds	eq	1.0
mike_spice:my_classifieds	mike spice my classifieds	eq	1.1
mike_spice:my_classifieds	mike spice my classifieds	eq	1.2

References

securitytracker.com/id?1003255

www.iss.net/security_center/static/7967.php

www.kb.cert.org/vuls/id/181907

www.securityfocus.com/bid/3855

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

Related for CVE-2002-1600

nvd1 cvelist1