Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2002-1183 | First vendor Publication | 2002-12-11 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862). |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1183 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:1059 | |||
| Oval ID: | oval:org.mitre.oval:def:1059 | ||
| Title: | Microsoft Certificate Validation Flaw Identity Spoofing Vulnerability (Variant) | ||
| Description: | Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862). | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2002-1183 | Version: | 4 |
| Platform(s): | Microsoft Windows NT | Product(s): | Certificate Validation |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:1455 | |||
| Oval ID: | oval:org.mitre.oval:def:1455 | ||
| Title: | Windows NT Certificate Validation Identity Spoofing Vulnerability (Test 1) | ||
| Description: | Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862). | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2002-1183 | Version: | 4 |
| Platform(s): | Microsoft Windows NT | Product(s): | Certificate Validation |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:2108 | |||
| Oval ID: | oval:org.mitre.oval:def:2108 | ||
| Title: | Windows NT Certificate Validation Identity Spoofing Vulnerability (Test 2) | ||
| Description: | Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862). | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2002-1183 | Version: | 3 |
| Platform(s): | Microsoft Windows NT | Product(s): | Certificate Validation |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Os | 1 | |
| Os | 1 | |
| Os | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-03-16 | Name : Microsoft MS03-018 security check File : nvt/remote-MS03-018.nasl |
| 2009-03-15 | Name : MS04-011 security check File : nvt/remote-MS04-011.nasl |
| 2005-11-03 | Name : Certificate Validation Flaw Could Enable Identity Spoofing (Q328145) File : nvt/smb_nt_ms02-050.nasl |
| 2005-11-03 | Name : Flaw in Microsoft VM Could Allow Code Execution (810030) File : nvt/smb_nt_ms02-052.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 865 | Multiple Vendor SSL Basic Constraints Intermediate CA-signed Certificate Vali... |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2002-10-24 | Name : It is possible to spoof user identities. File : smb_nt_ms02-050.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:23:44 |
|
| 2024-11-28 12:05:12 |
|
| 2021-05-04 12:01:46 |
|
| 2021-04-22 01:01:54 |
|
| 2020-05-23 00:15:06 |
|
| 2018-10-13 00:22:26 |
|
| 2017-10-10 09:23:24 |
|
| 2016-04-26 12:16:25 |
|
| 2014-02-17 10:25:09 |
|
| 2013-05-11 12:12:04 |
|
