CVE-2002-1487

The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332, (13) 333, (14) 352, and (15) 367.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html	Exploit Vendor Advisory
http://www.iss.net/security_center/static/10161.php	Vendor Advisory
http://www.securityfocus.com/bid/5775	Exploit Patch Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html	Exploit Vendor Advisory
http://www.iss.net/security_center/static/10161.php	Vendor Advisory
http://www.securityfocus.com/bid/5775	Exploit Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:cerulean_studios:trillian:0.74:*:*:*:*:*:*:*

History

20 Nov 2024, 23:41

Type	Values Removed	Values Added
References	~~() http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html - Exploit, Vendor Advisory~~	() http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html - Exploit, Vendor Advisory
References	~~() http://www.iss.net/security_center/static/10161.php - Vendor Advisory~~	() http://www.iss.net/security_center/static/10161.php - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/5775 - Exploit, Patch, Vendor Advisory~~	() http://www.securityfocus.com/bid/5775 - Exploit, Patch, Vendor Advisory

Information

Published : 2003-04-02 05:00

Updated : 2024-11-20 23:41

NVD link : CVE-2002-1487

Mitre link : CVE-2002-1487

CVE.ORG link : CVE-2002-1487

JSON object : View

Products Affected

cerulean_studios

trillian

CWE

NVD-CWE-Other

{"id": "CVE-2002-1487", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2003-04-02T05:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/10161.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5775", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.iss.net/security_center/static/10161.php", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/5775", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332, (13) 333, (14) 352, and (15) 367."}, {"lang": "es", "value": "El componente IRC de Trillian 0.73 y 0.74 permite a servidores IRC remotos malintencionados causar la Denegaci\u00f3n de Servicio (por caida)mediante el env\u00edo de mensajes 'no preparados' (raw messages): 206, 211, 213, 214, 215, 217, 218, 243, 302, 317, 324, 332, 333, 352, y 367."}], "lastModified": "2024-11-20T23:41:25.390", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cerulean_studios:trillian:0.74:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03C5DC92-EE8F-43A7-8F78-58D01FA4D4A1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}