jvndb - jvndb-2003-000030

JVNDB-2003-000030

Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-05-21 00:00

Severity ?

() - -

Summary

w3m Vulnerability of Unauthorized Access to Files or Cookies

Details

w3m fails to properly escape HTML tags in the ALT attribute of an IMG tag, which could allow an attacker to access files or cookies.

References

Type

URL

	CVE	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1348
	NVD	http://nvd.nist.gov/nvd.cfm?cvename=CVE-2002-1348
	BID	http://www.securityfocus.com/bid/6794
	XF	http://xforce.iss.net/xforce/xfdb/11266

Impacted products

Vendor

Product

	w3m project	w3m
	Red Hat, Inc.	Red Hat Linux

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2003/JVNDB-2003-000030.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "w3m fails to properly escape HTML tags in the ALT attribute of an IMG tag, which could allow an attacker to access files or cookies.",
  "link": "https://jvndb.jvn.jp/en/contents/2003/JVNDB-2003-000030.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:w3m_project:w3m",
      "@product": "w3m",
      "@vendor": "w3m project",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:redhat:linux",
      "@product": "Red Hat Linux",
      "@vendor": "Red Hat, Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2003-000030",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1348",
      "@id": "CVE-2002-1348",
      "@source": "CVE"
    },
    {
      "#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2002-1348",
      "@id": "CVE-2002-1348",
      "@source": "NVD"
    },
    {
      "#text": "http://www.securityfocus.com/bid/6794",
      "@id": "6794",
      "@source": "BID"
    },
    {
      "#text": "http://xforce.iss.net/xforce/xfdb/11266",
      "@id": "11266",
      "@source": "XF"
    }
  ],
  "title": "w3m Vulnerability of Unauthorized Access to Files or Cookies"
}

CVE-2002-1348 (GCVE-0-2002-1348)

Vulnerability from cvelistv5 – Published: 2004-09-01 04:00 – Updated: 2024-08-08 03:19

Summary

w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.redhat.com/support/errata/RHSA-2003-045.html	vendor-advisoryx_refsource_REDHAT
	http://www.debian.org/security/2003/dsa-251	vendor-advisoryx_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2003-044.html	vendor-advisoryx_refsource_REDHAT
	http://www.debian.org/security/2003/dsa-249	vendor-advisoryx_refsource_DEBIAN
	http://www.debian.org/security/2003/dsa-250	vendor-advisoryx_refsource_DEBIAN
	http://marc.info/?l=bugtraq&m=104552193927323&w=2	mailing-listx_refsource_BUGTRAQ
	http://sourceforge.net/project/shownotes.php?rele…	x_refsource_CONFIRM
	http://www.iss.net/security_center/static/11266.php	vdb-entryx_refsource_XF
	http://www.securityfocus.com/bid/6794	vdb-entryx_refsource_BID

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:19:28.827Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2003:045",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2003-045.html"
          },
          {
            "name": "DSA-251",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-251"
          },
          {
            "name": "RHSA-2003:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2003-044.html"
          },
          {
            "name": "DSA-249",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-249"
          },
          {
            "name": "DSA-250",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2003/dsa-250"
          },
          {
            "name": "20030217 GLSA:  w3m",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=104552193927323\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/project/shownotes.php?release_id=126233"
          },
          {
            "name": "w3m-img-alt-xss(11266)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/11266.php"
          },
          {
            "name": "6794",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/6794"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-12-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-11-29T00:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2003:045",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2003-045.html"
        },
        {
          "name": "DSA-251",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-251"
        },
        {
          "name": "RHSA-2003:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2003-044.html"
        },
        {
          "name": "DSA-249",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-249"
        },
        {
          "name": "DSA-250",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2003/dsa-250"
        },
        {
          "name": "20030217 GLSA:  w3m",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=104552193927323\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/project/shownotes.php?release_id=126233"
        },
        {
          "name": "w3m-img-alt-xss(11266)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/11266.php"
        },
        {
          "name": "6794",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/6794"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1348",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2003:045",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2003-045.html"
            },
            {
              "name": "DSA-251",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-251"
            },
            {
              "name": "RHSA-2003:044",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2003-044.html"
            },
            {
              "name": "DSA-249",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-249"
            },
            {
              "name": "DSA-250",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2003/dsa-250"
            },
            {
              "name": "20030217 GLSA:  w3m",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=104552193927323\u0026w=2"
            },
            {
              "name": "http://sourceforge.net/project/shownotes.php?release_id=126233",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/project/shownotes.php?release_id=126233"
            },
            {
              "name": "w3m-img-alt-xss(11266)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/11266.php"
            },
            {
              "name": "6794",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/6794"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1348",
    "datePublished": "2004-09-01T04:00:00",
    "dateReserved": "2002-12-10T00:00:00",
    "dateUpdated": "2024-08-08T03:19:28.827Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

JVNDB-2003-000030

CVE-2002-1348 (GCVE-0-2002-1348)

Tags

Sightings

Nomenclature