CVE-2002-1434

Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html	Patch Vendor Advisory
http://www.iss.net/security_center/static/9905.php	Patch Vendor Advisory
http://www.securityfocus.com/bid/5507	Exploit Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html	Patch Vendor Advisory
http://www.iss.net/security_center/static/9905.php	Patch Vendor Advisory
http://www.securityfocus.com/bid/5507	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:kerio:kerio_mailserver:5.0:::::::*
	cpe:2.3:a:kerio:kerio_mailserver:5.1:::::::*
	cpe:2.3:a:kerio:kerio_mailserver:5.1.1:::::::*

History

20 Nov 2024, 23:41

Type	Values Removed	Values Added
References	~~() http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html - Patch, Vendor Advisory~~	() http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html - Patch, Vendor Advisory
References	~~() http://www.iss.net/security_center/static/9905.php - Patch, Vendor Advisory~~	() http://www.iss.net/security_center/static/9905.php - Patch, Vendor Advisory
References	~~() http://www.securityfocus.com/bid/5507 - Exploit, Vendor Advisory~~	() http://www.securityfocus.com/bid/5507 - Exploit, Vendor Advisory

Information

Published : 2003-04-11 04:00

Updated : 2024-11-20 23:41

NVD link : CVE-2002-1434

Mitre link : CVE-2002-1434

CVE.ORG link : CVE-2002-1434

JSON object : View

Products Affected

kerio

kerio_mailserver

CWE

NVD-CWE-Other

{"id": "CVE-2002-1434", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2003-04-11T04:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/9905.php", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5507", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.iss.net/security_center/static/9905.php", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/5507", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados en el m\u00f3dulo de Web mail de Kerio MailServer 5.0 permiten que a trav\u00e9s de ciertas URL atacantes remotos ejecuten script HTML como si fueran otros usuarios"}], "lastModified": "2024-11-20T23:41:17.843", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kerio:kerio_mailserver:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7D26DCD-85B0-4908-A414-119862437C28"}, {"criteria": "cpe:2.3:a:kerio:kerio_mailserver:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B58BAF1-CF68-4F8C-8BCD-FF3C015FE72A"}, {"criteria": "cpe:2.3:a:kerio:kerio_mailserver:5.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B9C9084-B518-44F2-9F65-032A644FEC61"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}