Lucene search

MitreCVE-2002-2074

HistoryJul 14, 2005 - 4:00 a.m.

CVE-2002-2074

2005-07-1404:00:00

mitre

web.nvd.nist.gov

cve-2002-2074

sql injection

mailidx

remote attackers

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.003

Percentile

71.1%

JSON

SQL injection vulnerability in Mailidx before 20020105 allows remote attackers to execute arbitrary SQL commands via the search web page.

Affected configurations

Nvd

Node

erwin_lansingmailidxMatch20010925

VendorProductVersionCPE
erwin_lansingmailidx20010925cpe:2.3:a:erwin_lansing:mailidx:20010925:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
erwin_lansing	mailidx	20010925	cpe:2.3:a:erwin_lansing:mailidx:20010925:::::::*

References

dl.droso.net/mailidx-20020105.tar.gz

securitytracker.com/id?1003269

www.iss.net/security_center/static/7965.php

www.securityfocus.com/bid/3822

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

Low

EPSS

0.003

Percentile

71.1%

JSON

Related for CVE-2002-2074