Vulnerability Description
Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response.
CVSS Score
4.3
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nulllogic | Null Httpd | <= 0.5.0 |
References
- http://freshmeat.net/releases/97910/Vendor Advisory
- http://www.securityfocus.com/bid/5603
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10004
- http://freshmeat.net/releases/97910/Vendor Advisory
- http://www.securityfocus.com/bid/5603
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10004
FAQ
What is CVE-2002-1497?
CVE-2002-1497 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response.
How severe is CVE-2002-1497?
CVE-2002-1497 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-1497?
Check the references section above for vendor advisories and patch information. Affected products include: Nulllogic Null Httpd.