CVE

Id
5440  
CVE No.
CVE-2002-1052  
Status
Candidate  
Description
Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the physical path of the server using two requests to the "aux" device.  
Phase
Proposed (20020830)  
Votes
ACCEPT(1) Frech | NOOP(4) Cole, Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
29370 5440 CVE-2002-1052 BUGTRAQ:20020717 KPMG-2002031: Jigsaw Webserver Path Disclosure  View
29371 5440 CVE-2002-1052 URL:http://marc.info/?l=bugtraq&m=102691753204392&w=2  View
29372 5440 CVE-2002-1052 VULNWATCH:20020717 [VulnWatch] KPMG-2002031: Jigsaw Webserver Path Disclosure  View
29373 5440 CVE-2002-1052 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0028.html  View
29374 5440 CVE-2002-1052 VULNWATCH:20020717 [VulnWatch] KPMG-2002034: Jigsaw Webserver DOS device DoS  View
29375 5440 CVE-2002-1052 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0031.html  View
29376 5440 CVE-2002-1052 BUGTRAQ:20020717 KPMG-2002034: Jigsaw Webserver DOS device DoS  View
29377 5440 CVE-2002-1052 URL:http://marc.info/?l=bugtraq&m=102692936820193&w=2  View
29378 5440 CVE-2002-1052 BID:5258  View
29379 5440 CVE-2002-1052 URL:http://www.securityfocus.com/bid/5258  View
29380 5440 CVE-2002-1052 XF:jigsaw-dos-device-dos(9587)  View
29381 5440 CVE-2002-1052 URL:http://www.iss.net/security_center/static/9587.php  View
29382 5440 CVE-2002-1052 XF:jigsaw-aux-path-disclosure(9586)  View
29383 5440 CVE-2002-1052 URL:http://www.iss.net/security_center/static/9586.php  View
29384 5440 CVE-2002-1052 BID:5251  View

Related JVN