Lucene search

K

[email protected]NVD:CVE-2002-1393

HistoryJan 17, 2003 - 5:00 a.m.

CVE-2002-1393

2003-01-1705:00:00

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses.

Affected configurations

NVD

Node

kdekdeMatch2.0

OR

kdekdeMatch2.0.1

OR

kdekdeMatch2.1

OR

kdekdeMatch2.1.1

OR

kdekdeMatch2.1.2

OR

kdekdeMatch2.2

OR

kdekdeMatch2.2.1

OR

kdekdeMatch2.2.2

OR

kdekdeMatch3.0

OR

kdekdeMatch3.0.1

OR

kdekdeMatch3.0.2

OR

kdekdeMatch3.0.3

OR

kdekdeMatch3.0.3a

OR

kdekdeMatch3.0.4

OR

kdekdeMatch3.0.5

References

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

Related for NVD:CVE-2002-1393

nessus12 debian20 osv10 openvas20 cvelist1 debiancve1 cve1 redhat1