CVE-2002-1260

Microsoft VM <5.0.3805 - Auth Bypass

Title source: llm
STIX 2.1

Description

The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.

References (4)

Core 4
Core References
Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/n-026.shtml
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6379
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10833

Scores

EPSS 0.1552
EPSS Percentile 96.5%

Details

Status published
Products (8)
microsoft/windows_2000 (4 CPE variants)
microsoft/windows_2000_terminal_services (4 CPE variants)
microsoft/windows_95 (2 CPE variants)
microsoft/windows_98
microsoft/windows_98se
microsoft/windows_me
microsoft/windows_nt 4.0 sp1 (28 CPE variants)
microsoft/windows_xp (2 CPE variants)
Published Dec 23, 2002
Tracked Since Feb 18, 2026