CVE-2002-1601

The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page.

CVSS v2.0 5.1 MEDIUM

5.1^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability : 4.9 / Impact : 6.4

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.kb.cert.org/vuls/id/116875	US Government Resource
http://www.kb.cert.org/vuls/id/AAMN-56LQ2J	US Government Resource
http://www.securityfocus.com/bid/4106	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/8210
http://www.kb.cert.org/vuls/id/116875	US Government Resource
http://www.kb.cert.org/vuls/id/AAMN-56LQ2J	US Government Resource
http://www.securityfocus.com/bid/4106	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/8210

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:adobe:photodeluxe:3.0:::::::*
	cpe:2.3:a:adobe:photodeluxe:3.1:::::::*
	cpe:2.3:a:adobe:photodeluxe:4.0:::::::*

History

20 Nov 2024, 23:41

Type	Values Removed	Values Added
References	~~() http://www.kb.cert.org/vuls/id/116875 - US Government Resource~~	() http://www.kb.cert.org/vuls/id/116875 - US Government Resource
References	~~() http://www.kb.cert.org/vuls/id/AAMN-56LQ2J - US Government Resource~~	() http://www.kb.cert.org/vuls/id/AAMN-56LQ2J - US Government Resource
References	~~() http://www.securityfocus.com/bid/4106 - Vendor Advisory~~	() http://www.securityfocus.com/bid/4106 - Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/8210 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/8210 -

Information

Published : 2002-02-09 05:00

Updated : 2024-11-20 23:41

NVD link : CVE-2002-1601

Mitre link : CVE-2002-1601

CVE.ORG link : CVE-2002-1601

JSON object : View

Products Affected

adobe

photodeluxe

CWE

NVD-CWE-Other

{"id": "CVE-2002-1601", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": true}]}, "published": "2002-02-09T05:00:00.000", "references": [{"url": "http://www.kb.cert.org/vuls/id/116875", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/AAMN-56LQ2J", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/4106", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/8210", "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/116875", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/AAMN-56LQ2J", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/4106", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/8210", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page."}], "lastModified": "2024-11-20T23:41:41.703", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:photodeluxe:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33C945E8-3376-41AC-B76F-07C9317432E4"}, {"criteria": "cpe:2.3:a:adobe:photodeluxe:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D16ED2A-9115-454E-BC1E-F651275DCD54"}, {"criteria": "cpe:2.3:a:adobe:photodeluxe:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFD1AF1C-7308-442E-AD39-EE66C982452E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}