Lucene search

[email protected]CVE-2002-2062

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-2062

2022-10-0316:23:49

[email protected]

web.nvd.nist.gov

cve

2002

2062

cross-site scripting

xss

internet explorer

windows 2000

ftp

remote attackers

vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.172 Low

EPSS

Percentile

96.1%

JSON

Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with “Enable folder view for FTP sites” and “Enable Web content in folders” selected, allows remote attackers to inject arbitrary web script or HTML via the hostname portion of an FTP URL.

Affected configurations

NVD

Node

microsoftinternet_explorerMatch5.5

microsoftinternet_explorerMatch5.5sp1

microsoftinternet_explorerMatch5.5sp2

microsoftinternet_explorerMatch6.0

CPENameOperatorVersion
microsoft:internet_explorermicrosoft internet explorereq5.5
microsoft:internet_explorermicrosoft internet explorereq6.0

CPE	Name	Operator	Version
microsoft:internet_explorer	microsoft internet explorer	eq	5.5
microsoft:internet_explorer	microsoft internet explorer	eq	6.0

References

archives.neohapsis.com/archives/bugtraq/2002-06/0037.html

www.geocities.co.jp/SiliconValley/1667/advisory02e.html

www.iss.net/security_center/static/9290.php

www.securityfocus.com/bid/4954

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.172 Low

EPSS

Percentile

96.1%

JSON

Related for CVE-2002-2062

cvelist1 nvd1