CVE-2002-0273

Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://marc.info/?l=bugtraq&m=101362100602008&w=2
http://www.iss.net/security_center/static/8185.php
http://www.securityfocus.com/bid/4093

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:netwin:cwmail:2.7:::::::*
	cpe:2.3:a:netwin:cwmail:2.7a:::::::*
	cpe:2.3:a:netwin:cwmail:2.7b:::::::*
	cpe:2.3:a:netwin:cwmail:2.7c:::::::*
	cpe:2.3:a:netwin:cwmail:2.7d:::::::*
	cpe:2.3:a:netwin:cwmail:2.7f:::::::*
	cpe:2.3:a:netwin:cwmail:2.7i:::::::*
	cpe:2.3:a:netwin:cwmail:2.7j:::::::*
	cpe:2.3:a:netwin:cwmail:2.7k:::::::*
	cpe:2.3:a:netwin:cwmail:2.7l:::::::*
	cpe:2.3:a:netwin:cwmail:2.7m:::::::*
	cpe:2.3:a:netwin:cwmail:2.7n:::::::*
	cpe:2.3:a:netwin:cwmail:2.7o:::::::*
	cpe:2.3:a:netwin:cwmail:2.7p:::::::*
	cpe:2.3:a:netwin:cwmail:2.7q:::::::*
	cpe:2.3:a:netwin:cwmail:2.7s:::::::*
	cpe:2.3:a:netwin:cwmail:2.7t:::::::*

History

No history.

Information

Published : 2002-05-31 04:00

Updated : 2024-02-28 10:24

NVD link : CVE-2002-0273

Mitre link : CVE-2002-0273

CVE.ORG link : CVE-2002-0273

JSON object : View

Products Affected

netwin

cwmail

CWE

NVD-CWE-Other

{"id": "CVE-2002-0273", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2002-05-31T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=101362100602008&w=2", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/8185.php", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/4093", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en CWMail.exe en NetWin anteriores a 2.8a permite a usuarios remotos remotos ejecutar c\u00f3digo arbitrario mediante un par\u00e1metro largo."}], "lastModified": "2016-10-18T02:18:06.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:netwin:cwmail:2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42185AA2-67D1-4B4F-87D5-9F32AC2D76FD"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB976F02-3E39-4506-AADF-18AF20ABC0F7"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0AA61CC-7D39-4AC0-B991-C823ADA20B0A"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3C52197-7B09-4428-8757-00C4445F005C"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7d:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8635893-00C7-4DD2-AEBB-A9495FCDDD90"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7f:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25797BBA-5151-41A0-8203-ECAB33577D2E"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7i:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB6F5F1D-014D-4DDF-BEDF-F892A4ECBD26"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7j:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61742FFF-23C2-497C-A365-6225AFA5755A"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7k:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C84C5AF3-7B80-448D-8E91-B048767B9918"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7l:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35AC4C13-A7EA-493D-8C5D-C8B93FF1C9E3"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7m:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AAAA425-D08A-466B-BF3E-E762706D7978"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7n:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AA42779-4CF3-43B0-B398-3DCD807C0277"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7o:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70582B3B-A1D3-4B4F-82EC-076A2E5BBD27"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7p:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "178CFED4-C44E-42BA-895A-6243979FB57D"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7q:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F74F776-C678-4376-AD86-2864D83E5A34"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4FE5E85-6CAA-4BDA-A717-1533DECC73C5"}, {"criteria": "cpe:2.3:a:netwin:cwmail:2.7t:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD829E09-7E40-4EFF-8664-4BCAEF80B14E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}