2.1low
CVE-2000-0502
Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows…
Published 26 y ago · modified 4 mo ago · JSON
CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 35%
Public exploits
0
none known
Summary
Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion.
Exploit prediction (EPSS)
0.40% probability of exploitation in the next 30 days, higher than 35% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:P/A:N |
References
- exchange.xforce.ibmcloud.com /vulnerabilities/4641 · vdb-entry, x_refsource_XF, x_transferred
- archives.neohapsis.com /archives/bugtraq/2000-06/0038.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- osvdb.org /6287 · vdb-entry, x_refsource_OSVDB, x_transferred
- securityfocus.com /bid/1326 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2000-0502
- NVD: CVE-2000-0502
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.