CVE-2002-1759

The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html
http://www.securityfocus.com/bid/4597	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/8944
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html
http://www.securityfocus.com/bid/4597	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/8944

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:phprojekt:phprojekt:2.0:::::::*
	cpe:2.3:a:phprojekt:phprojekt:2.0.1:::::::*
	cpe:2.3:a:phprojekt:phprojekt:2.1:::::::*
	cpe:2.3:a:phprojekt:phprojekt:2.1a:::::::*
	cpe:2.3:a:phprojekt:phprojekt:2.2:::::::*
	cpe:2.3:a:phprojekt:phprojekt:2.3:::::::*
	cpe:2.3:a:phprojekt:phprojekt:2.4:::::::*
	cpe:2.3:a:phprojekt:phprojekt:2.4a:::::::*
	cpe:2.3:a:phprojekt:phprojekt:3.0:::::::*
	cpe:2.3:a:phprojekt:phprojekt:3.1:::::::*
	cpe:2.3:a:phprojekt:phprojekt:3.1a:::::::*

History

20 Nov 2024, 23:42

Type	Values Removed	Values Added
References	~~() http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html -~~	() http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html -
References	~~() http://www.securityfocus.com/bid/4597 - Patch~~	() http://www.securityfocus.com/bid/4597 - Patch
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/8944 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/8944 -

Information

Published : 2002-12-31 05:00

Updated : 2024-11-20 23:42

NVD link : CVE-2002-1759

Mitre link : CVE-2002-1759

CVE.ORG link : CVE-2002-1759

JSON object : View

Products Affected

phprojekt

phprojekt

CWE

NVD-CWE-Other

{"id": "CVE-2002-1759", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-12-31T05:00:00.000", "references": [{"url": "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/4597", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/8944", "source": "cve@mitre.org"}, {"url": "http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/4597", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/8944", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files."}], "lastModified": "2024-11-20T23:42:03.587", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:phprojekt:phprojekt:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D245D09E-BF00-4E14-9A12-83BCAE55BD0C"}, {"criteria": "cpe:2.3:a:phprojekt:phprojekt:2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "505FD923-F1FB-486A-B85A-DAC31982E21C"}, {"criteria": "cpe:2.3:a:phprojekt:phprojekt:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "414705DF-A3AD-4CF1-8391-32F09EF8BAB5"}, {"criteria": "cpe:2.3:a:phprojekt:phprojekt:2.1a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16C2B2E2-AA2B-40B0-A7FB-D1A191D39939"}, {"criteria": "cpe:2.3:a:phprojekt:phprojekt:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5ED3BCB7-D94E-4985-8951-01AD3C15C28A"}, {"criteria": "cpe:2.3:a:phprojekt:phprojekt:2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F69C99BE-581F-4EE3-A798-E7FF0433CF16"}, {"criteria": "cpe:2.3:a:phprojekt:phprojekt:2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "960BD03B-D527-4EC4-B642-130F2AA49AC8"}, {"criteria": "cpe:2.3:a:phprojekt:phprojekt:2.4a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0B762E4-5E4D-4B9D-A756-6CDE49366317"}, {"criteria": "cpe:2.3:a:phprojekt:phprojekt:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C20E262-6E6B-48A2-B831-48A5A8C72F25"}, {"criteria": "cpe:2.3:a:phprojekt:phprojekt:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89E0C51C-F9DE-4140-97D9-4777811DFA1F"}, {"criteria": "cpe:2.3:a:phprojekt:phprojekt:3.1a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4758B7C9-D6F3-47BC-A5AC-5DAC508DE18B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}