| ID |
CVE-2002-1183
|
| Summary |
Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862). |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 7.5 (as of 12-10-2018 - 21:32) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
PARTIAL |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
| oval
via4
|
| accepted | 2008-03-24T04:00:11.447-04:00 | | class | vulnerability | | contributors | | name | Christine Walzer | | organization | The MITRE Corporation |
| name | Christine Walzer | | organization | The MITRE Corporation |
| name | Christine Walzer | | organization | The MITRE Corporation |
| name | Christine Walzer | | organization | The MITRE Corporation |
| name | Jonathan Baker | | organization | The MITRE Corporation |
| | definition_extensions | | comment | Microsoft Windows NT is installed | | oval | oval:org.mitre.oval:def:36 |
| | description | Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862). | | family | windows | | id | oval:org.mitre.oval:def:1059 | | status | accepted | | submitted | 2004-07-12T12:00:00.000-04:00 | | title | Microsoft Certificate Validation Flaw Identity Spoofing Vulnerability (Variant) | | version | 76 |
| accepted | 2008-03-24T04:00:14.956-04:00 | | class | vulnerability | | contributors | | name | Christine Walzer | | organization | The MITRE Corporation |
| name | Christine Walzer | | organization | The MITRE Corporation |
| name | Christine Walzer | | organization | The MITRE Corporation |
| name | Christine Walzer | | organization | The MITRE Corporation |
| name | John Hoyland | | organization | Centennial Software |
| name | Jonathan Baker | | organization | The MITRE Corporation |
| | definition_extensions | | comment | Microsoft Windows NT is installed | | oval | oval:org.mitre.oval:def:36 |
| | description | Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862). | | family | windows | | id | oval:org.mitre.oval:def:1455 | | status | accepted | | submitted | 2004-07-12T12:00:00.000-04:00 | | title | Windows NT Certificate Validation Identity Spoofing Vulnerability (Test 1) | | version | 76 |
| accepted | 2008-03-24T04:00:21.402-04:00 | | class | vulnerability | | contributors | | name | Christine Walzer | | organization | The MITRE Corporation |
| name | Christine Walzer | | organization | The MITRE Corporation |
| name | Christine Walzer | | organization | The MITRE Corporation |
| name | Christine Walzer | | organization | The MITRE Corporation |
| name | Jonathan Baker | | organization | The MITRE Corporation |
| | definition_extensions | | comment | Microsoft Windows NT is installed | | oval | oval:org.mitre.oval:def:36 |
| | description | Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862). | | family | windows | | id | oval:org.mitre.oval:def:2108 | | status | accepted | | submitted | 2004-07-12T12:00:00.000-04:00 | | title | Windows NT Certificate Validation Identity Spoofing Vulnerability (Test 2) | | version | 75 |
|
| refmap
via4
|
| bid | 5410 | | xf | ssl-ca-certificate-spoofing(9776) |
|
| Last major update |
12-10-2018 - 21:32 |
| Published |
11-12-2002 - 05:00 |
| Last modified |
12-10-2018 - 21:32 |
