Lucene search

K
cve[email protected]CVE-2002-1825
HistoryJun 28, 2005 - 4:00 a.m.

CVE-2002-1825

2005-06-2804:00:00
web.nvd.nist.gov
25
cve-2002-1825
format string vulnerability
perlrte_example1.pl
wasd 7.1
wasd 7.2
wasd 8.0
remote attackers
arbitrary commands
server crash

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

7.7 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.2%

Format string vulnerability in PerlRTE_example1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0 allows remote attackers to execute arbitrary commands or crash the server via format strings in the $name variable.

Affected configurations

NVD
Node
wasdwasd_http_serverMatch7.1
OR
wasdwasd_http_serverMatch7.2
OR
wasdwasd_http_serverMatch7.2.1
OR
wasdwasd_http_serverMatch7.2.2
OR
wasdwasd_http_serverMatch7.2.3
OR
wasdwasd_http_serverMatch8.0

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

7.7 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.2%

Related for CVE-2002-1825