vulnwire
2.1low

CVE-2002-1888

CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name re…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 29%
Public exploits
0
none known

CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names.

Exploit prediction (EPSS)

0.35% probability of exploitation in the next 30 days, higher than 29% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.02.1AV:L/AC:L/Au:N/C:P/I:N/A:N

References

  • securityfocus.com /bid/5878 · vdb-entry, x_refsource_BID, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2002-10/0043.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • iss.net /security_center/static/10293.php · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.