CVE-2002-1721

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2002-1721
Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGET_FILE variable with a (null) byte.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://www.pldaniels.com/altermime/CHANGELOG Release Notes
http://www.securityfocus.com/bid/4650 Broken Link Patch Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/8992 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:pldaniels:altermime:0.1.10:*:*:*:*:*:*:*
cpe:2.3:a:pldaniels:altermime:0.1.11:*:*:*:*:*:*:*
History

15 Feb 2024, 21:13

Type Values Removed Values Added
CWE NVD-CWE-Other CWE-193
First Time Pldaniels
Pldaniels altermime
CVSS v2 : 5.0
v3 : unknown 		v2 : 5.0
v3 : 7.5
CPE cpe:2.3:a:paul_l_daniels:altermime:0.1.10:*:*:*:*:*:*:*
cpe:2.3:a:paul_l_daniels:altermime:0.1.11:*:*:*:*:*:*:*		 cpe:2.3:a:pldaniels:altermime:0.1.11:*:*:*:*:*:*:*
cpe:2.3:a:pldaniels:altermime:0.1.10:*:*:*:*:*:*:*
References () http://www.pldaniels.com/altermime/CHANGELOG - () http://www.pldaniels.com/altermime/CHANGELOG - Release Notes
References () http://www.securityfocus.com/bid/4650 - Patch () http://www.securityfocus.com/bid/4650 - Broken Link, Patch, Third Party Advisory, VDB Entry
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/8992 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/8992 - Third Party Advisory, VDB Entry
Information

Published : 2002-12-31 05:00

Updated : 2024-02-15 21:13

NVD link : CVE-2002-1721

Mitre link : CVE-2002-1721

CVE.ORG link : CVE-2002-1721

JSON object : View

Products Affected

pldaniels

  • altermime
CWE
CWE-193

Off-by-one Error