CVE-2002-1009

Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html
http://www.iss.net/security_center/static/9548.php	Vendor Advisory
http://www.securityfocus.com/bid/5211	Exploit Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html
http://www.iss.net/security_center/static/9548.php	Vendor Advisory
http://www.securityfocus.com/bid/5211	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:summit_computer_networks:lil_http_server:2.1:::::::*
	cpe:2.3:a:summit_computer_networks:lil_http_server:2.2:::::::*

History

20 Nov 2024, 23:40

Type	Values Removed	Values Added
References	~~() http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html -~~	() http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html -
References	~~() http://www.iss.net/security_center/static/9548.php - Vendor Advisory~~	() http://www.iss.net/security_center/static/9548.php - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/5211 - Exploit, Vendor Advisory~~	() http://www.securityfocus.com/bid/5211 - Exploit, Vendor Advisory

Information

Published : 2002-10-04 04:00

Updated : 2024-11-20 23:40

NVD link : CVE-2002-1009

Mitre link : CVE-2002-1009

CVE.ORG link : CVE-2002-1009

JSON object : View

Products Affected

summit_computer_networks

lil_http_server

CWE

NVD-CWE-Other

{"id": "CVE-2002-1009", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2002-10-04T04:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/9548.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5211", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.iss.net/security_center/static/9548.php", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/5211", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) \"Name\" or (2) \"E-mail\" parameters."}], "lastModified": "2024-11-20T23:40:23.103", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:summit_computer_networks:lil_http_server:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DDCE4B2-41B9-4548-82E8-E884C6091FBF"}, {"criteria": "cpe:2.3:a:summit_computer_networks:lil_http_server:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7A843CF-0322-46EE-AD9A-C564007FED58"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}