Lucene search

MitreCVE-2002-2413

HistoryNov 01, 2007 - 5:00 p.m.

CVE-2002-2413

2007-11-0117:00:00

mitre

web.nvd.nist.gov

cve-2002-2413

website pro

windows

remote attackers

script source code

url request

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.2

Confidence

Low

EPSS

0.006

Percentile

78.8%

JSON

WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name.

Affected configurations

Nvd

Node

microsoftwindows_9x

microsoftwindows_nt

AND

deerfieldwebsite_proMatch3.1.11.0

VendorProductVersionCPE
microsoftwindows_9x*cpe:2.3:o:microsoft:windows_9x:*:*:*:*:*:*:*:*
microsoftwindows_nt*cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*
deerfieldwebsite_pro3.1.11.0cpe:2.3:a:deerfield:website_pro:3.1.11.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_9x	*	cpe:2.3:o:microsoft:windows_9x::::::::
microsoft	windows_nt	*	cpe:2.3:o:microsoft:windows_nt::::::::
deerfield	website_pro	3.1.11.0	cpe:2.3:a:deerfield:website_pro:3.1.11.0:::::::*

References

archives.neohapsis.com/archives/bugtraq/2002-05/0178.html

www.iss.net/security_center/static/9147.php

www.securityfocus.com/bid/4783

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.2

Confidence

Low

EPSS

0.006

Percentile

78.8%

JSON

Related for CVE-2002-2413