PT-2002-1003 · Wwwoffle · Wwwoffle

Published 2002-08-12 · Updated 2016-10-18 · CVE-2002-0818

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions World Wide Web Offline Explorer (WWWOFFLE) (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value. Multiple vulnerabilities in the wwwoffle package may lead to breaches of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-01285

CVE-2002-0818

DSA-144

Affected Products

Wwwoffle

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2002-0818 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0818 · Security Note
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-048.0.txt · Vendor Advisory
• http://debian.org/security/2002/dsa-144 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=102821890317683&w=2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01285 · Security Note
• http://securityfocus.com/bid/5260 · Note
• http://iss.net/security_center/static/9619.php · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0194.html · Note
• http://debian.org/security/dsa-144 · Note