Lucene search

[email protected]CVE-2002-1628

HistoryMar 26, 2005 - 5:00 a.m.

CVE-2002-1628

2005-03-2605:00:00

[email protected]

web.nvd.nist.gov

cve

2002

1628

directory traversal

vulnerability

vote.cgi

mike spice

remote attackers

arbitrary files

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.3%

JSON

Directory traversal vulnerability in vote.cgi for Mike Spice Mike’s Vote CGI before 1.3 allows remote attackers to write arbitrary files via … (dot dot) sequences in the type parameter.

Affected configurations

NVD

Node

mike_spicemikes_vote_cgiMatch1.0

mike_spicemikes_vote_cgiMatch1.1

mike_spicemikes_vote_cgiMatch1.2

CPENameOperatorVersion
mike_spice:mikes_vote_cgimike spice mikes vote cgieq1.0
mike_spice:mikes_vote_cgimike spice mikes vote cgieq1.1
mike_spice:mikes_vote_cgimike spice mikes vote cgieq1.2

CPE	Name	Operator	Version
mike_spice:mikes_vote_cgi	mike spice mikes vote cgi	eq	1.0
mike_spice:mikes_vote_cgi	mike spice mikes vote cgi	eq	1.1
mike_spice:mikes_vote_cgi	mike spice mikes vote cgi	eq	1.2

References

www.kb.cert.org/vuls/id/250107

www.securityfocus.com/bid/3854

exchange.xforce.ibmcloud.com/vulnerabilities/7971

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.3%

JSON

Related for CVE-2002-1628

nvd1 cvelist1