Lucene search

[email protected]CVE-2002-1742

HistoryJun 21, 2005 - 4:00 a.m.

CVE-2002-1742

2005-06-2104:00:00

[email protected]

web.nvd.nist.gov

cve-2002-1742

soap::lite

remote attackers

perl

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.2 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.4%

JSON

SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger.

Affected configurations

NVD

Node

paul_kulchenkosoap_liteMatch0.50

paul_kulchenkosoap_liteMatch0.51

paul_kulchenkosoap_liteMatch0.52

CPENameOperatorVersion
paul_kulchenko:soap_litepaul kulchenko soap liteeq0.50
paul_kulchenko:soap_litepaul kulchenko soap liteeq0.51
paul_kulchenko:soap_litepaul kulchenko soap liteeq0.52

CPE	Name	Operator	Version
paul_kulchenko:soap_lite	paul kulchenko soap lite	eq	0.50
paul_kulchenko:soap_lite	paul kulchenko soap lite	eq	0.51
paul_kulchenko:soap_lite	paul kulchenko soap lite	eq	0.52

References

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A02.asc

online.securityfocus.com/archive/1/267051

use.perl.org/articles/02/04/09/000212.shtml?tid=5

www.phrack.com/show.php?p=58&a=9

www.phrack.org/show.php?p=58&a=9

www.securityfocus.com/bid/4493

www.soaplite.com/

exchange.xforce.ibmcloud.com/vulnerabilities/8838

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.2 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.4%

JSON

Related for CVE-2002-1742

cvelist1 nvd1