ID
VAR-200212-0006
CVE
CVE-2002-1183
TITLE
Microsoft Vulnerability in arbitrary code execution in product digital certificate authentication process
Trust: 0.8
DESCRIPTION
Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862). ------------ This vulnerability information is a summary of multiple vulnerabilities released at the same time. Please note that the contents of vulnerability information other than the title are included. ------------ Micrisoft Internet Explorer (IE) Has implemented SSL as well as Microsoft Outlook Express S/MIME Has a flaw in handling certificates. IE as well as Outlook S/MIME Then, the intermediate certificate authority ( Middle CA) Because it does not check the validity of the domain, it accepts a domain certificate created by a malicious user as normal. Usually an intermediate certificate is Basic Constraints In the extension field, it is described whether you have the authority to sign other certificate authorities. IE as well as Outlook S/MIME In the implementation of this Basic Constraints The extended area is not checked sufficiently. If the root certificate authority can be trusted, it will trust the certificate. for that reason, IE as well as Outlook S/MIME Accepts certificates from any domain signed with a bad certificate created by a malicious user as normal. By exploiting this problem, an attacker can intercept and steal encrypted information, or spoof. Microsoft Windows 2000 SP4 After applying Internet Exploer 6.0 SP1 Vendors have reported that they are affected by this issue. Eliminate this problem Windows 2000 SP4 Patch for (KB329115) But 2003 Year 11 Moon 11 Released by date.Please refer to the “Overview” for the impact of this vulnerability. A flaw has been reported in the handling of X.509 certificates by a number of products, including several web browsers. It may be possible for a malicious party to create certificates for arbitrary domains, which will be treated as trusted by the vulnerable browser. This vulnerability was originally reported in Microsoft's Internet Explorer web browser. Reports state that IIS 5.0 under Windows 2000 is also vulnerable. In this case, client certificate chains are not properly verified. Attackers may exploit this vulnerability to bypass some authentication schemes. This vulnerability also exists in some versions of KDE and the included Konqueror web browser. Versions 3.0.2 and earlier are vulnerable. ** A report suggests that the patch issued by Microsoft may not fully protect against this vulnerability. It may be possible that a malicious site using an invalid certificate may mislead users into believing that a certificate is expired rather than being invalid. ** UPDATE 11/11/03 - Microsoft has updated their bulletin for this issue. Users who installed Internet Explorer 6 after installing Windows 2000 Service Pack 4 may have reintroduced this issue onto their systems. A new patch is available for users who installed Internet Explorer 6 on Windows 2000 SP4 systems
Trust: 1.89
AFFECTED PRODUCTS
| vendor: | microsoft | model: | windows nt | scope: | eq | version: | 4.0 | Trust: 1.9 |
| vendor: | microsoft | model: | windows 98se | scope: | eq | version: | * | Trust: 1.0 |
| vendor: | microsoft | model: | windows 98 | scope: | eq | version: | * | Trust: 1.0 |
| vendor: | microsoft | model: | windows 98se | scope: | - | version: | - | Trust: 0.9 |
| vendor: | microsoft | model: | windows 9x | scope: | eq | version: | 98 | Trust: 0.8 |
| vendor: | microsoft | model: | windows 9x | scope: | eq | version: | 98 scd | Trust: 0.8 |
| vendor: | microsoft | model: | windows nt | scope: | eq | version: | 4.0 (server) | Trust: 0.8 |
| vendor: | microsoft | model: | windows nt | scope: | eq | version: | 4.0 (terminal_srv) | Trust: 0.8 |
| vendor: | microsoft | model: | windows 98 | scope: | eq | version: | gold | Trust: 0.6 |
| vendor: | microsoft | model: | windows xp professional sp1 | scope: | - | version: | - | Trust: 0.3 |
| vendor: | microsoft | model: | windows xp professional | scope: | - | version: | - | Trust: 0.3 |
| vendor: | microsoft | model: | windows xp home sp1 | scope: | - | version: | - | Trust: 0.3 |
| vendor: | microsoft | model: | windows xp home | scope: | - | version: | - | Trust: 0.3 |
| vendor: | microsoft | model: | windows xp 64-bit edition sp1 | scope: | - | version: | - | Trust: 0.3 |
| vendor: | microsoft | model: | windows xp 64-bit edition | scope: | - | version: | - | Trust: 0.3 |
| vendor: | microsoft | model: | windows xp | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt workstation sp6a | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt workstation sp6 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt workstation sp5 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt workstation sp4 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt workstation sp3 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt workstation sp2 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt workstation sp1 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt workstation | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt terminal server sp6 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt terminal server sp5 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt terminal server sp4 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt terminal server sp3 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt terminal server sp2 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt terminal server sp1 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt terminal server | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt server sp6a | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt server sp6 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt server sp5 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt server sp4 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt server sp3 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt server sp2 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt server sp1 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt server | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt enterprise server sp6a | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt enterprise server sp6 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt enterprise server sp5 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt enterprise server sp4 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt enterprise server sp3 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt enterprise server sp2 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt enterprise server sp1 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt enterprise server | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp6a alpha | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp6a | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp6 alpha | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp6 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp5 alpha | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp5 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp4 alpha | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp4 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp3 alpha | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp3 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp2 alpha | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp2 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp1 alpha | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt sp1 | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows nt alpha | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | microsoft | model: | windows me | scope: | - | version: | - | Trust: 0.3 |
| vendor: | microsoft | model: | windows | scope: | eq | version: | 98 | Trust: 0.3 |
| vendor: | microsoft | model: | windows terminal services sp3 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows terminal services sp2 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows terminal services sp1 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows terminal services | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows server sp4 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows server sp3 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows server sp2 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows server sp1 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows server | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows professional sp4 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows professional sp3 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows professional sp2 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows professional sp1 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows professional | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows datacenter server sp4 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows datacenter server sp3 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows datacenter server sp2 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows datacenter server sp1 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows datacenter server | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows advanced server sp4 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows advanced server sp3 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows advanced server sp2 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows advanced server sp1 | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | windows advanced server | scope: | eq | version: | 2000 | Trust: 0.3 |
| vendor: | microsoft | model: | outlook express for macos | scope: | eq | version: | 5.0.3 | Trust: 0.3 |
| vendor: | microsoft | model: | outlook express for macos | scope: | eq | version: | 5.0.2 | Trust: 0.3 |
| vendor: | microsoft | model: | outlook express for macos | scope: | eq | version: | 5.0.1 | Trust: 0.3 |
| vendor: | microsoft | model: | outlook express for macos | scope: | eq | version: | 5.0 | Trust: 0.3 |
| vendor: | microsoft | model: | outlook express for macos | scope: | eq | version: | 4.5 | Trust: 0.3 |
| vendor: | microsoft | model: | outlook express | scope: | eq | version: | 5.0 | Trust: 0.3 |
| vendor: | microsoft | model: | office | scope: | eq | version: | v.x | Trust: 0.3 |
| vendor: | microsoft | model: | office for mac | scope: | eq | version: | 98 | Trust: 0.3 |
| vendor: | microsoft | model: | office for macintosh sr1 | scope: | eq | version: | 2001 | Trust: 0.3 |
| vendor: | microsoft | model: | office for macintosh | scope: | eq | version: | 2001 | Trust: 0.3 |
| vendor: | microsoft | model: | internet explorer sp2 | scope: | eq | version: | 5.0.1 | Trust: 0.3 |
| vendor: | microsoft | model: | internet explorer sp1 | scope: | eq | version: | 5.0.1 | Trust: 0.3 |
| vendor: | microsoft | model: | internet explorer | scope: | eq | version: | 5.0.1 | Trust: 0.3 |
| vendor: | microsoft | model: | internet explorer | scope: | eq | version: | 6.0 | Trust: 0.3 |
| vendor: | microsoft | model: | internet explorer sp2 | scope: | eq | version: | 5.5 | Trust: 0.3 |
| vendor: | microsoft | model: | internet explorer sp1 | scope: | eq | version: | 5.5 | Trust: 0.3 |
| vendor: | microsoft | model: | internet explorer | scope: | eq | version: | 5.5 | Trust: 0.3 |
| vendor: | microsoft | model: | internet explorer for windows | scope: | eq | version: | 5.02000 | Trust: 0.3 |
| vendor: | microsoft | model: | internet explorer | scope: | eq | version: | 5.0 | Trust: 0.3 |
| vendor: | microsoft | model: | iis | scope: | eq | version: | 5.0 | Trust: 0.3 |
| vendor: | kde | model: | konqueror | scope: | eq | version: | 3.0.2 | Trust: 0.3 |
| vendor: | kde | model: | konqueror | scope: | eq | version: | 3.0.1 | Trust: 0.3 |
| vendor: | kde | model: | konqueror | scope: | eq | version: | 3.0 | Trust: 0.3 |
| vendor: | kde | model: | konqueror | scope: | eq | version: | 2.2.2 | Trust: 0.3 |
| vendor: | kde | model: | kde | scope: | eq | version: | 3.0.2 | Trust: 0.3 |
| vendor: | kde | model: | kde | scope: | eq | version: | 3.0.1 | Trust: 0.3 |
| vendor: | kde | model: | kde | scope: | eq | version: | 3.0 | Trust: 0.3 |
| vendor: | kde | model: | kde | scope: | eq | version: | 2.2.2 | Trust: 0.3 |
| vendor: | kde | model: | kde | scope: | eq | version: | 2.2.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 7.0.0.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 7.0.0.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 | scope: | eq | version: | 7.0.0.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 7.02 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 7.01 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 | scope: | eq | version: | 7.0 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 6.14 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 6.13 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 6.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 6.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 | scope: | eq | version: | 6.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.19 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.18 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.17 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.16 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.15 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.14 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.13 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.113 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.112 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.111 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.110 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | eq | version: | 5.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 | scope: | eq | version: | 5.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 7.0.0.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 7.0.0.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server | scope: | eq | version: | 7.0.0.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 7.03 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 7.02 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 7.01 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server | scope: | eq | version: | 7.0 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 6.14 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 6.13 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 6.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 6.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server | scope: | eq | version: | 6.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.19 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.18 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.17 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.16 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.15 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.14 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.13 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.113 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.112 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.111 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.110 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | eq | version: | 5.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server | scope: | eq | version: | 5.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 7.0.0.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 7.0.0.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 | scope: | eq | version: | 7.0.0.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 7.02 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 7.01 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 | scope: | eq | version: | 7.0 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 6.14 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 6.13 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 6.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 6.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 | scope: | eq | version: | 6.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.19 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.18 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.17 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.16 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.15 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.14 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.13 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.113 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.112 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.111 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.110 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | eq | version: | 5.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 | scope: | eq | version: | 5.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 7.0.0.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 7.0.0.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express | scope: | eq | version: | 7.0.0.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 7.03 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 7.02 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 7.01 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express | scope: | eq | version: | 7.0 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 6.14 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 6.13 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 6.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 6.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express | scope: | eq | version: | 6.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.19 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.18 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.17 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.16 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.15 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.14 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.13 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.113 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.112 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.111 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.110 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | eq | version: | 5.11 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express | scope: | eq | version: | 5.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic enterprise sp | scope: | eq | version: | 5.110 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic enterprise | scope: | eq | version: | 5.1 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic enterprise | scope: | eq | version: | 5.0.1 | Trust: 0.3 |
| vendor: | bea | model: | systems tuxedo | scope: | eq | version: | 8.1 | Trust: 0.3 |
| vendor: | bea | model: | systems tuxedo | scope: | eq | version: | 8.0 | Trust: 0.3 |
| vendor: | baltimore | model: | mailsecure | scope: | - | version: | - | Trust: 0.3 |
| vendor: | adam | model: | megacz tinyssl | scope: | eq | version: | 1.0.2 | Trust: 0.3 |
| vendor: | kde | model: | konqueror | scope: | ne | version: | 3.0.3 | Trust: 0.3 |
| vendor: | kde | model: | kde | scope: | ne | version: | 3.0.3 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | ne | version: | 7.0.0.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | ne | version: | 7.02 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server for win32 sp | scope: | ne | version: | 6.15 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | ne | version: | 7.0.0.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | ne | version: | 7.02 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic server sp | scope: | ne | version: | 6.15 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | ne | version: | 7.0.0.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | ne | version: | 7.02 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express for win32 sp | scope: | ne | version: | 6.15 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | ne | version: | 7.0.0.12 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | ne | version: | 7.02 | Trust: 0.3 |
| vendor: | bea | model: | systems weblogic express sp | scope: | ne | version: | 6.15 | Trust: 0.3 |
| vendor: | adam | model: | megacz tinyssl | scope: | ne | version: | 1.0.3 | Trust: 0.3 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | NVD-CWE-Other | Trust: 1.0 |
THREAT TYPE
remote
Trust: 0.6
TYPE
unknown
Trust: 0.6
CONFIGURATIONS
PATCH
| title: | MS02-050 | url: | http://www.microsoft.com/technet/security/bulletin/MS02-050.asp | Trust: 0.8 |
| title: | MS02-050 | url: | http://www.microsoft.com/japan/technet/security/bulletin/MS02-050.mspx | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2002-1183 | Trust: 2.7 |
| db: | BID | id: | 5410 | Trust: 2.7 |
| db: | JVNDB | id: | JVNDB-2002-000177 | Trust: 0.8 |
| db: | OVAL | id: | OVAL:ORG.MITRE.OVAL:DEF:1455 | Trust: 0.6 |
| db: | OVAL | id: | OVAL:ORG.MITRE.OVAL:DEF:2108 | Trust: 0.6 |
| db: | OVAL | id: | OVAL:ORG.MITRE.OVAL:DEF:1059 | Trust: 0.6 |
| db: | MS | id: | MS02-050 | Trust: 0.6 |
| db: | XF | id: | 9776 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-200212-021 | Trust: 0.6 |
REFERENCES
| url: | http://www.securityfocus.com/bid/5410 | Trust: 2.4 |
| url: | https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050 | Trust: 1.0 |
| url: | https://exchange.xforce.ibmcloud.com/vulnerabilities/9776 | Trust: 1.0 |
| url: | https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a1059 | Trust: 1.0 |
| url: | https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a1455 | Trust: 1.0 |
| url: | https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a2108 | Trust: 1.0 |
| url: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2002-1183 | Trust: 0.8 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2002-1183 | Trust: 0.8 |
| url: | http://www.microsoft.com/technet/security/bulletin/ms02-050.asp | Trust: 0.6 |
| url: | http://xforce.iss.net/xforce/xfdb/9776 | Trust: 0.6 |
| url: | http://oval.mitre.org/repository/data/getdef?id=oval:org.mitre.oval:def:2108 | Trust: 0.6 |
| url: | http://oval.mitre.org/repository/data/getdef?id=oval:org.mitre.oval:def:1455 | Trust: 0.6 |
| url: | http://oval.mitre.org/repository/data/getdef?id=oval:org.mitre.oval:def:1059 | Trust: 0.6 |
| url: | http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/news/iarwsv.asp | Trust: 0.3 |
| url: | http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms02-050.asp | Trust: 0.3 |
| url: | http://www.computerworld.com/securitytopics/security/holes/story/0,10801,73507,00.html | Trust: 0.3 |
| url: | http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/bea03-31.jsp | Trust: 0.3 |
| url: | http://www.info.apple.com/usen/security/security_updates.html | Trust: 0.3 |
| url: | /archive/1/307885 | Trust: 0.3 |
CREDITS
Reported by Mike Benham <moxie@thoughtcrime.org>.
Trust: 0.3
SOURCES
| db: | BID | id: | 5410 |
| db: | JVNDB | id: | JVNDB-2002-000177 |
| db: | CNNVD | id: | CNNVD-200212-021 |
| db: | NVD | id: | CVE-2002-1183 |
LAST UPDATE DATE
2024-08-14T13:40:35.235000+00:00
SOURCES UPDATE DATE
| db: | BID | id: | 5410 | date: | 2009-07-11T14:56:00 |
| db: | JVNDB | id: | JVNDB-2002-000177 | date: | 2007-04-01T00:00:00 |
| db: | CNNVD | id: | CNNVD-200212-021 | date: | 2005-10-12T00:00:00 |
| db: | NVD | id: | CVE-2002-1183 | date: | 2018-10-12T21:32:05.910 |
SOURCES RELEASE DATE
| db: | BID | id: | 5410 | date: | 2002-08-06T00:00:00 |
| db: | JVNDB | id: | JVNDB-2002-000177 | date: | 2007-04-01T00:00:00 |
| db: | CNNVD | id: | CNNVD-200212-021 | date: | 2002-12-11T00:00:00 |
| db: | NVD | id: | CVE-2002-1183 | date: | 2002-12-11T05:00:00 |