CVE-2002-1061

{"id": "CVE-2002-1061", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2002-10-04T04:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/9682.php", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/9683.php", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/9685.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/9686.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5319", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5320", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5322", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5324", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP GET request with a long major version number, (2) an HTTP GET request to the HTTP proxy on port 3128 with a long major version number, (3) a long OK reply from a POP3 server, and (4) a long SMTP server response."}], "lastModified": "2008-09-05T20:29:40.723", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:t._hauck:jana_web_server:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09026053-0568-4D8F-AEB0-F7850C655635"}, {"criteria": "cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C0BC837-4993-4780-B4B0-88D4C1A42BD5"}, {"criteria": "cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4505B16-611E-422F-995D-748281466621"}, {"criteria": "cpe:2.3:a:t._hauck:jana_web_server:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "525A467E-9EFF-47AE-AEBC-BE769073A64C"}, {"criteria": "cpe:2.3:a:t._hauck:jana_web_server:2.0_beta1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1812EAA2-85E0-47CE-A704-646AF4AA5CF7"}, {"criteria": "cpe:2.3:a:t._hauck:jana_web_server:2.0_beta2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD6D91CA-E975-49CF-BF32-1E0302D5D8AD"}, {"criteria": "cpe:2.3:a:t._hauck:jana_web_server:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD2CDD0D-387C-413A-B2E8-DB18A7E3FD3B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}