Vulnerability Details : CVE-2002-0525
Potential exploit
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
Products affected by CVE-2002-0525
- cpe:2.3:a:isc:inn:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:isc:inn:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:isc:inn:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:isc:inn:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:isc:inn:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:isc:inn:2.2.3:*:*:*:*:*:*:*
Threat overview for CVE-2002-0525
Top countries where our scanners detected CVE-2002-0525
Top open port discovered on systems with this issue
119
IPs affected by CVE-2002-0525 1
Find out if you* are
affected by CVE-2002-0525!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2002-0525
2.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 82 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2002-0525
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2002-0525
-
http://www.iss.net/security_center/static/8834.php
Vendor Advisory
-
http://www.securityfocus.com/bid/4501
Exploit;Patch;Vendor Advisory
-
http://archives.neohapsis.com/archives/bugtraq/2002-04/0140.html
Jump to