PT-2002-1003 · Wwwoffle · Wwwoffle

Publicado 2002-08-12 · Atualizado 2016-10-18 · CVE-2002-0818

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions World Wide Web Offline Explorer (WWWOFFLE) (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value. Multiple vulnerabilities in the wwwoffle package may lead to breaches of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2015-01285

CVE-2002-0818

DSA-144

Produtos afetados

Wwwoffle

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2002-0818 · Nota de Segurança
• http://securityfocus.com/bid/5260 · Nota
• http://iss.net/security_center/static/9619.php · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0818 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0194.html · Nota
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-048.0.txt · Aviso do Fabricante
• http://debian.org/security/dsa-144 · Nota
• http://debian.org/security/2002/dsa-144 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=102821890317683&w=2 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-01285 · Nota de Segurança