Vulnerability CVE-2002-1260
Published: 2002-12-23   Modified: 2012-02-12

Description:
The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.

Type:

CWE-Other

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Microsoft -> Windows 2000 
Microsoft -> Windows 2000 terminal services 
Microsoft -> Windows 95 
Microsoft -> Windows 98 
Microsoft -> Windows 98se 
Microsoft -> Windows me 
Microsoft -> Windows nt 
Microsoft -> Windows xp 

 References:
http://www.ciac.org/ciac/bulletins/n-026.shtml
http://www.securityfocus.com/bid/6379
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069
https://exchange.xforce.ibmcloud.com/vulnerabilities/10833
Copyright 2024, cxsecurity.com

 

Back to Top