7.6
CVE-2002-0299
- EPSS 2.25%
- Veröffentlicht 31.05.2002 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:57:10
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such as .BAT), which is executed during a scan.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.25% | 0.806 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.6 | 4.9 | 10 |
AV:N/AC:H/Au:N/C:C/I:C/A:C
|
http://marc.info/?l=bugtraq&m=101438631921749&w=2
http://www.iss.net/security_center/static/8035.php
http://www.securityfocus.com/bid/3975