Lucene search

MitreCVE-2002-1788

HistoryJun 28, 2005 - 4:00 a.m.

CVE-2002-1788

2005-06-2804:00:00

mitre

web.nvd.nist.gov

cve-2002-1788

format string vulnerability

6.6.0

6.6.3

remote code execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.005

Percentile

77.3%

JSON

Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses.

Affected configurations

Nvd

Node

kim_stormnnMatch6.6.0

kim_stormnnMatch6.6.1

kim_stormnnMatch6.6.2

kim_stormnnMatch6.6.3

VendorProductVersionCPE
kim_stormnn6.6.0cpe:2.3:a:kim_storm:nn:6.6.0:*:*:*:*:*:*:*
kim_stormnn6.6.1cpe:2.3:a:kim_storm:nn:6.6.1:*:*:*:*:*:*:*
kim_stormnn6.6.2cpe:2.3:a:kim_storm:nn:6.6.2:*:*:*:*:*:*:*
kim_stormnn6.6.3cpe:2.3:a:kim_storm:nn:6.6.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kim_storm	nn	6.6.0	cpe:2.3:a:kim_storm:nn:6.6.0:::::::*
kim_storm	nn	6.6.1	cpe:2.3:a:kim_storm:nn:6.6.1:::::::*
kim_storm	nn	6.6.2	cpe:2.3:a:kim_storm:nn:6.6.2:::::::*
kim_storm	nn	6.6.3	cpe:2.3:a:kim_storm:nn:6.6.3:::::::*

References

online.securityfocus.com/archive/1/280639

www.iss.net/security_center/static/9491.php

www.osvdb.org/27086

www.securityfocus.com/bid/5160

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.005

Percentile

77.3%

JSON

Related for CVE-2002-1788