CVE-2003-5001

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2003-5001
A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.cgisecurity.com/articles/xss-faq.shtml
http://www.computec.ch/mruef/advisories/black_ice_pc_protection_xss_evasion.txt
https://vuldb.com/?id.104
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:iss_blackice_pc_protection:-:*:*:*:*:*:*:*
History

07 Nov 2023, 01:56

Type Values Removed Values Added
Summary ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
References (MISC) https://vuldb.com/?id.104 - Third Party Advisory () https://vuldb.com/?id.104 -
References (MISC) http://www.computec.ch/mruef/advisories/black_ice_pc_protection_xss_evasion.txt - Broken Link () http://www.computec.ch/mruef/advisories/black_ice_pc_protection_xss_evasion.txt -
References (MISC) http://www.cgisecurity.com/articles/xss-faq.shtml - Third Party Advisory () http://www.cgisecurity.com/articles/xss-faq.shtml -

06 Apr 2022, 03:37

Type Values Removed Values Added
First Time Ibm iss Blackice Pc Protection
Ibm
CPE cpe:2.3:a:ibm:iss_blackice_pc_protection:-:*:*:*:*:*:*:*
References (MISC) http://www.cgisecurity.com/articles/xss-faq.shtml - (MISC) http://www.cgisecurity.com/articles/xss-faq.shtml - Third Party Advisory
References (MISC) http://www.computec.ch/mruef/advisories/black_ice_pc_protection_xss_evasion.txt - (MISC) http://www.computec.ch/mruef/advisories/black_ice_pc_protection_xss_evasion.txt - Broken Link
References (MISC) https://vuldb.com/?id.104 - (MISC) https://vuldb.com/?id.104 - Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : 7.5
v3 : 9.8
CWE NVD-CWE-noinfo

28 Mar 2022, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-03-28 21:15

Updated : 2024-04-11 00:37

NVD link : CVE-2003-5001

Mitre link : CVE-2003-5001

CVE.ORG link : CVE-2003-5001

JSON object : View

Products Affected

ibm

  • iss_blackice_pc_protection
CWE
NVD-CWE-noinfo CWE-269

Improper Privilege Management