« Volver al listado

CVE-2002-0166

Estado: ModificadaAlta (7.5)—

Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Stephen Turner — Analog

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-0166",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-04-22T04:00:00.000",
  "references": [
    {
      "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.asc",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2002/dsa-125",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/8656.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/2059",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2002-059.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/4389",
      "source": "cve@mitre.org"
    },
    {
      "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.asc",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2002/dsa-125",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/8656.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/2059",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2002-059.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/4389",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de secuencias de comandos de sitios cruzados (cross-site scripting) en Analog anteriores a 5.22 permite a atacantes remotos ejecutar JavaScript mediante una petición HTTP conteniendo el script, que es introducido en un fichero de log del web, y no es filtrado adecuadamente por Analog cuando se muestra."
    }
  ],
  "lastModified": "2026-06-16T21:56:55.370",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:3.90_beta1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC102017-B339-41D9-B11E-CF64F983A750"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:3.90_beta2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "657632A3-2897-422C-A088-3874E6725E37"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7B91F08-55C9-43EE-A80F-9869C5C58CCE"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "527DE616-EF06-47AA-95F4-1EB6A7E294A1"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8F4F056-9002-4A4C-8EDC-4B79BDC4FA7D"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6899BFF0-FF4B-4432-A462-E3C51E056017"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.04:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5FDE3231-1587-4C2A-BF06-101CB521273F"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3356840C-D439-482D-A887-0232225CD2E4"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4483701-C15F-4A16-98CC-96227413B4A3"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "015FD63B-D99C-40C1-9421-80006B248781"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4662985-2475-4A86-B80B-2B443A405990"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.90_beta2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D263B198-E177-4AA4-A3B9-4BA8DE2F5BB6"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.90_beta3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "759C4FB3-38F9-4BE7-9377-900D8BEC364E"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.90_beta4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "557CB8FC-C129-4405-B820-89B0FFEA4A4E"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:4.91_beta1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3CB8DB25-CF43-4679-AD32-8CCD4AD9C304"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9924882D-A147-46EC-B09F-ED4023AFD946"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:5.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3112A224-B446-48C1-B5DF-738A2A008DBD"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:5.1a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6776B5E3-DC49-4997-BA1F-3D3602D386E5"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA38754B-9ABE-4E1C-A80E-677B9657815A"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:5.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CD6B280-FB4C-4096-8055-CB176CDA6755"
            },
            {
              "criteria": "cpe:2.3:a:stephen_turner:analog:5.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA3E3239-EB87-4D56-B3AF-E940BACE7F70"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}