{ "id": "CVE-2002-0862", "sourceIdentifier": "cve@mitre.org", "published": "2002-10-04T04:00:00.000", "lastModified": "2021-07-23T12:55:03.667", "vulnStatus": "Modified", "descriptions": [ { "lang": "en", "value": "The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS." }, { "lang": "es", "value": "Las APIs (Application Programming Interface) \r\n\r\nCertGetCertificateChain\r\nCertVerifyCertificateChainPolicy \r\nWinVerifyTrust\r\n\r\nen la CriptoAPI de productos de Microsoft, incluyendo Microsoft Windows 98 a XP, Office para Mac, Internet Explorer para Mac, y Outlook Express para Mac, no verifican adecuadamente las restricciones b\u00e1sicas de certificados X.509 firmados por CAs (Autoridad Certificadora) intermedias, lo que permite a atacantes remotos falsear los certificados de sitios de confianza mediante un ataque tipo hombre-en-el-medio en sesiones SSL, como se inform\u00f3 anteriormente para Internet Explorer e IIS." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 7.5 }, "baseSeverity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:adam_megacz:tinyssl:1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "7F56C6A1-E4A4-4F47-8043-A2695D12A4D5" }, { "vulnerable": true, "criteria": "cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "D435E39F-4F70-481B-9225-B072B79BEB69" }, { "vulnerable": true, "criteria": "cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "8AD68BAB-8945-4A22-938E-12C01D0111D0" }, { "vulnerable": true, "criteria": "cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "7B3220BF-B0AF-4C90-89BD-B425EE58021D" }, { "vulnerable": true, "criteria": "cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:ie_for_macintosh:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "24AF4E57-D3DF-4D5A-958D-A593454A39A7" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:ie_for_macintosh:5.1:*:*:*:*:*:*:*", "matchCriteriaId": "54861851-0AD7-43C7-AF38-ECE9BD69CAE1" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:ie_for_macintosh:5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "BFCB6BED-ACFD-431B-B272-C0954ED203FA" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "E6B8985B-B927-4928-B1DB-18E29F796992" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "3A04FEA6-37B0-44B0-844F-55652ABA1F85" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*", "matchCriteriaId": "4D56FB8E-2553-47C1-82A2-9E59023780CE" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*", "matchCriteriaId": "8541EEED-94F4-42F8-9719-57F3EC85D52B" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*", "matchCriteriaId": "40F8042F-C621-45AE-9F8C-70469579643A" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*", "matchCriteriaId": "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*", "matchCriteriaId": "D05ED9D0-CF78-4FAD-9371-6FB3D5825148" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "A19F6133-25D1-44A5-B6B9-354703436783" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "413C07EA-139F-4B7D-A58B-835BD2591FA0" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:office:98:*:mac:*:*:*:*:*", "matchCriteriaId": "36227AF5-8A53-41E3-88E3-5978C22BBAB2" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:office:2001:*:macintosh:*:*:*:*:*", "matchCriteriaId": "1B397137-45EC-4856-9F91-0C682BF6990E" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:office:2001:sr1:mac_os:*:*:*:*:*", "matchCriteriaId": "68257FB3-3280-4299-A96B-613F60D797C3" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:office:v.x:*:*:*:*:*:*:*", "matchCriteriaId": "310DF9B3-3494-4BD4-8A9D-82211EA6C518" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:outlook_express:4.5:*:macos:*:*:*:*:*", "matchCriteriaId": "846A98FC-362A-4C0D-95D9-E4809BA5057E" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "1F71D6D7-6CB2-4BE9-839A-A5714144029C" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:outlook_express:5.0:*:macos:*:*:*:*:*", "matchCriteriaId": "0C607D22-B01D-4404-9657-0D322CE59B0D" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:outlook_express:5.0.1:*:macos:*:*:*:*:*", "matchCriteriaId": "A47283EA-513A-4EDC-BADA-659AFA28EA38" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:outlook_express:5.0.2:*:macos:*:*:*:*:*", "matchCriteriaId": "EBA048BD-04A9-4BB9-9F3C-60FB1BE1D2BD" }, { "vulnerable": true, "criteria": "cpe:2.3:a:microsoft:outlook_express:5.0.3:*:macos:*:*:*:*:*", "matchCriteriaId": "FB6349F9-6C93-48A1-92F6-18BF1D286DF9" } ] } ] }, { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:baltimore_technologies:mailsecure:*:*:*:*:*:*:*:*", "matchCriteriaId": "263600BD-C8FA-4A8D-A51B-0DE5BA769FAC" }, { "vulnerable": true, "criteria": "cpe:2.3:o:kde:kde:2.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "EEAE9343-7A7F-4CB0-8CEF-52D61BD689C3" }, { "vulnerable": true, "criteria": "cpe:2.3:o:kde:kde:2.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "3F531972-E0A7-4E7C-A899-3766CEAAE2EF" }, { "vulnerable": true, "criteria": "cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "4CEED379-3111-4451-B782-8C66CE568A1C" }, { "vulnerable": true, "criteria": "cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "B146FCD3-F6E7-4412-94FD-F9E66089C227" }, { "vulnerable": true, "criteria": "cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*", "matchCriteriaId": "294EBA01-147B-4DA0-937E-ACBB655EDE53" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*", "matchCriteriaId": "4E8B7346-F2AA-434C-A048-7463EC1BB117" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*", "matchCriteriaId": "BE1A6107-DE00-4A1C-87FC-9E4015165B5B" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*", "matchCriteriaId": "9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*", "matchCriteriaId": "8208AFC9-0EFC-4A90-AD5A-FD94F5542885" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*", "matchCriteriaId": "4D4168AE-D19E-482E-8F2B-3E798B2D84E7" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*", "matchCriteriaId": "B5E149E7-B748-44F6-BB55-68D5BF87AF41" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*", "matchCriteriaId": "2D3B703C-79B2-4FA2-9E12-713AB977A880" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*", "matchCriteriaId": "AA733AD2-D948-46A0-A063-D29081A56F1F" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*", "matchCriteriaId": "799DA395-C7F8-477C-8BC7-5B4B88FB7503" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "E53CDA8E-50A8-4509-B070-CCA5604FFB21" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:alpha:*:*:*:*:*", "matchCriteriaId": "1A4FF113-BDCB-472C-A300-3DE5A12A7031" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*", "matchCriteriaId": "6E7E6AD3-5418-4FEA-84B5-833059CA880D" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*", "matchCriteriaId": "5BDCBCB8-DAA3-465F-ADDE-9143B8251989" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:alpha:*:*:*:*:*", "matchCriteriaId": "F8E32528-4DA7-4FF8-BBA1-929C5C44FAD4" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*", "matchCriteriaId": "EA262C44-C0E6-493A-B8E5-4D26E4013226" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*", "matchCriteriaId": "B86E0671-ED68-4549-B3AC-FD8BD79B0860" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:alpha:*:*:*:*:*", "matchCriteriaId": "3F9C691E-CD79-4D8B-BD35-04BDE4422A4E" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*", "matchCriteriaId": "EB519FE0-9E7D-4E71-8873-356C9D7CEAB5" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*", "matchCriteriaId": "BB76E7EC-C396-4537-9065-4E815DA7097C" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:alpha:*:*:*:*:*", "matchCriteriaId": "0EF2010D-5D16-40A7-B7DE-8168C76E5BDB" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*", "matchCriteriaId": "224F8968-9F4C-4727-AAA3-61F5578EF54C" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*", "matchCriteriaId": "4CD026E2-B073-40A6-AD4A-8C76B9169B01" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:alpha:*:*:*:*:*", "matchCriteriaId": "DD500955-71F7-41AD-96EE-E8CC6A7FA7A3" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*", "matchCriteriaId": "407DA6E8-0832-49FE-AE14-35C104C237EC" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*", "matchCriteriaId": "DBFB3E49-3FB5-4947-856D-727CBFFBA543" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:alpha:*:*:*:*:*", "matchCriteriaId": "CC031C07-FA91-426B-9772-64910AE12635" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*", "matchCriteriaId": "AFE612D2-DF38-404F-AED1-B8C9C24012DE" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*", "matchCriteriaId": "B9236480-6450-42E1-B1FF-F336488A683A" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:alpha:*:*:*:*:*", "matchCriteriaId": "D97FA0F5-6A53-4E3A-BFCF-1AFF4B83CB37" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*", "matchCriteriaId": "BCC5E316-FB61-408B-BAA2-7FE03D581250" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*", "matchCriteriaId": "14F55877-A759-4C8A-84D5-70508E449799" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:alpha:*:*:*:*:*", "matchCriteriaId": "C79E6858-BB9C-4229-9DBE-8DA8627D10A4" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*", "matchCriteriaId": "2FECD4B0-23A0-4C0B-9888-D28A5941D848" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*", "matchCriteriaId": "91D6D065-A28D-49DA-B7F4-38421FF86498" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*", "matchCriteriaId": "BC176BB0-1655-4BEA-A841-C4158167CC9B" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*", "matchCriteriaId": "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*", "matchCriteriaId": "4BF263CB-4239-4DB0-867C-9069ED02CAD7" } ] } ] } ], "references": [ { "url": "http://marc.info/?l=bugtraq&m=102866120821995&w=2", "source": "cve@mitre.org" }, { "url": "http://marc.info/?l=bugtraq&m=102918200405308&w=2", "source": "cve@mitre.org" }, { "url": "http://marc.info/?l=bugtraq&m=102976967730450&w=2", "source": "cve@mitre.org" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050", "source": "cve@mitre.org" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/9776", "source": "cve@mitre.org" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1056", "source": "cve@mitre.org" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1332", "source": "cve@mitre.org" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2671", "source": "cve@mitre.org" } ] }