Executive Summary
| Informations | |||
|---|---|---|---|
| Name | MS02-048 | First vendor Publication | N/A |
| Vendor | Microsoft | Last vendor Modification | N/A |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Flaw in Certificate Enrollment Control Could Allow Deletion of Digital Certificates (Q323172) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:190 | |||
| Oval ID: | oval:org.mitre.oval:def:190 | ||
| Title: | ActiveX Certificate Enrollment Unauthorized Remote Certificate Deletion | ||
| Description: | Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2002-0699 | Version: | 7 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | Certificate Enrollment Control |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Os | 1 | |
| Os | 1 | |
| Os | 1 | |
| Os | 1 | |
| Os | 1 | |
| Os | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2005-11-03 | Name : Flaw in Certificate Enrollment Control (Q323172) File : nvt/smb_nt_ms02-048.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 864 | Microsoft Windows Certificate Enrollment ActiveX Arbitrary Certificate Deletion |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Microsoft Windows Certificate Enrollment ActiveX object access RuleID : 4184 - Revision : 12 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Windows Smartcard Enrollment ActiveX object access RuleID : 4181 - Revision : 12 - Type : BROWSER-PLUGINS |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2002-10-24 | Name : It is possible to delete digital certificates on the remote host. File : smb_nt_ms02-048.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:44:45 |
|
| 2014-01-19 21:29:47 |
|
