VulnerabilityModified
CVE-2002-1888
CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names.
LOW 2.1EPSS 0.35%
Does this matter?
Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.
Description
CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.35% probability · 28th percentile
- CISA KEV
- Not listed
- Affected
- commonname/commonname toolbar
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0043.htmlVendor Advisory
- http://www.iss.net/security_center/static/10293.php
- http://www.securityfocus.com/bid/5878
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0043.htmlVendor Advisory
- http://www.iss.net/security_center/static/10293.php
- http://www.securityfocus.com/bid/5878
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.