« Volver al listado

CVE-2002-0532

Estado: ModificadaAlta (7.2)—

EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Emumail — EmumailEmumail — Emumail RED HAT LinuxEmumail — Emumail Unix

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-0532",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-08-12T04:00:00.000",
  "references": [
    {
      "url": "http://online.securityfocus.com/archive/1/266930",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/8836.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/5270",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/4488",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://online.securityfocus.com/archive/1/266930",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/8836.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/5270",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/4488",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters."
    }
  ],
  "lastModified": "2026-06-16T21:57:37.350",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emumail:emumail:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4202D61D-D727-40D7-BAC4-8EF3EA824CD4"
            },
            {
              "criteria": "cpe:2.3:a:emumail:emumail_red_hat_linux:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6E730ED-DB66-4E3C-816D-BFDB9E26C98A"
            },
            {
              "criteria": "cpe:2.3:a:emumail:emumail_red_hat_linux:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97FDBEF6-425A-44DC-B668-B306720AB666"
            },
            {
              "criteria": "cpe:2.3:a:emumail:emumail_unix:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "050D6915-EF9C-4C5C-BFA1-C8A445058D91"
            },
            {
              "criteria": "cpe:2.3:a:emumail:emumail_unix:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91BBEE72-62E8-4CC3-B2DD-727407151BC9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}