PT-2002-1012 · Debian · Smb2Www

Published 2002-12-11 · Updated 2008-09-10 · CVE-2002-1342

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions smb2www versions 980804-16 and earlier

Description The issue concerns multiple vulnerabilities in the smb2www package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. Remote attackers can execute arbitrary commands.

Recommendations For versions 980804-16 and earlier, consider disabling the vulnerable smb2www package until a patch is available. Restrict access to the smb2www module to minimize the risk of exploitation. Avoid using the smb2www package in sensitive operations until the issue is resolved.

Fix

Related Identifiers

BDU:2015-02887

CVE-2002-1342

DSA-203

Affected Products

Smb2Www

References · 10

• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1342 · Vendor Advisory
• http://debian.org/security/2002/dsa-203 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2002-1342 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02887 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2002-1342 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1342 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-1342 · Security Note
• http://debian.org/security/dsa-203 · Note
• http://iss.net/security_center/static/10768.php · Note
• http://securityfocus.com/bid/6313 · Note