Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2002-0862

Published: 04/10/2002 Updated: 09/02/2024
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Windows Xp

Vulnerability Summary

The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote malicious users to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows xp -

microsoft windows 2000 -

microsoft windows 98 -

microsoft windows me -

microsoft windows 98se -

microsoft windows nt 4.0

microsoft internet_explorer -

microsoft office -

microsoft outlook_express -

Exploits

Exploit DB: Microsoft Internet Explorer 5/6 / Konqueror 2.2.2/3.0 / Weblogic Server 5/6/7 - Invalid X.509 Certificate Chain
source: wwwsecurityfocuscom/bid/5410/info A flaw has been reported in the handling of X509 certificates by a number of products, including several web browsers It may be possible for a malicious party to create certificates for arbitrary domains, which will be treated as trusted by the vulnerable browser The flaw lies in the handling ...

References

CWE-295http://marc.info/?l=bugtraq&m=102976967730450&w=2http://marc.info/?l=bugtraq&m=102866120821995&w=2http://marc.info/?l=bugtraq&m=102918200405308&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/9776https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2671https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1332https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1056https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050https://nvd.nist.govhttps://www.exploit-db.com/exploits/21692/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook