Lucene search

[email protected]CVE-2002-2425

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-2425

2022-10-0316:23:50

CWE-264

[email protected]

web.nvd.nist.gov

cve

sun answerbook2

remote code execution

security vulnerability

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.026 Low

EPSS

Percentile

90.4%

JSON

Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError and (2) AdminAddadmin via a direct request.

Affected configurations

NVD

Node

sunsolaris_answerbook2Match1.2

sunsolaris_answerbook2Match1.3

sunsolaris_answerbook2Match1.4

sunsolaris_answerbook2Match1.4.1

sunsolaris_answerbook2Match1.4.2

CPENameOperatorVersion
sun:solaris_answerbook2sun solaris answerbook2eq1.2
sun:solaris_answerbook2sun solaris answerbook2eq1.3
sun:solaris_answerbook2sun solaris answerbook2eq1.4
sun:solaris_answerbook2sun solaris answerbook2eq1.4.1
sun:solaris_answerbook2sun solaris answerbook2eq1.4.2

CPE	Name	Operator	Version
sun:solaris_answerbook2	sun solaris answerbook2	eq	1.2
sun:solaris_answerbook2	sun solaris answerbook2	eq	1.3
sun:solaris_answerbook2	sun solaris answerbook2	eq	1.4
sun:solaris_answerbook2	sun solaris answerbook2	eq	1.4.1
sun:solaris_answerbook2	sun solaris answerbook2	eq	1.4.2

References

archives.neohapsis.com/archives/bugtraq/2002-07/0486.html

www.iss.net/security_center/static/9756.php

www.securityfocus.com/bid/5383

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.026 Low

EPSS

Percentile

90.4%

JSON

Related for CVE-2002-2425

nvd1 cvelist1