PT-2002-3154 · Debian · W3M

Published 1970-01-01 · Updated 2016-10-18 · CVE-2002-1348

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.3.2.2

Description The issue concerns multiple vulnerabilities in the w3m package of the Debian GNU/Linux operating system, which can lead to a breach of protected information confidentiality. These vulnerabilities can be exploited remotely. The problem is related to the improper escaping of HTML tags in the ALT attribute of an IMG tag, potentially allowing remote attackers to access files or cookies.

Recommendations For versions prior to 0.3.2.2, update to version 0.3.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until the update is applied.

Fix

Related Identifiers

BDU:2015-02566

BDU:2015-02684

BDU:2015-02685

BDU:2015-02929

BDU:2015-03067

BDU:2015-03291

CVE-2002-1348

DSA-249

DSA-251

Affected Products

W3M

References · 24

• https://bdu.fstec.ru/vul/2015-03067 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1348 · Security Note
• http://iss.net/security_center/static/11266.php · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1335 · Security Note
• http://debian.org/security/2003/dsa-250 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2002-1348 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02566 · Security Note
• http://redhat.com/support/errata/RHSA-2003-044.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03291 · Security Note
• http://debian.org/security/2003/dsa-249 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02685 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1348 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1348 · Security Note
• http://debian.org/security/2003/dsa-251 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-045.html · Vendor Advisory