{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2001-12-27T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2004-08-18T00:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20020109 Details on the updated namazu packages that are available", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=101068116016472&w=2"}, {"name": "linux-namazu-css(7875)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7875"}, {"name": "5691", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/5691"}, {"name": "20011227 Re: [RHSA-2001:162-04] Updated namazu packages are available", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=100947261916155&w=2"}, {"name": "RHSA-2001:179", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://marc.info/?l=bugtraq&m=101060476404565&w=2"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2001-1352", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20020109 Details on the updated namazu packages that are available", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=101068116016472&w=2"}, {"name": "linux-namazu-css(7875)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7875"}, {"name": "5691", "refsource": "OSVDB", "url": "http://www.osvdb.org/5691"}, {"name": "20011227 Re: [RHSA-2001:162-04] Updated namazu packages are available", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=100947261916155&w=2"}, {"name": "RHSA-2001:179", "refsource": "REDHAT", "url": "http://marc.info/?l=bugtraq&m=101060476404565&w=2"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T04:51:08.402Z"}, "title": "CVE Program Container", "references": [{"name": "20020109 Details on the updated namazu packages that are available", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=101068116016472&w=2"}, {"name": "linux-namazu-css(7875)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7875"}, {"name": "5691", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/5691"}, {"name": "20011227 Re: [RHSA-2001:162-04] Updated namazu packages are available", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=100947261916155&w=2"}, {"name": "RHSA-2001:179", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=101060476404565&w=2"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2001-1352", "datePublished": "2004-09-01T04:00:00", "dateReserved": "2002-06-02T00:00:00", "dateUpdated": "2024-08-08T04:51:08.402Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:namazu:namazu:*:*:*:*:*:*:*:*", "matchCriteriaId": "ECC217CB-23A3-457D-81B5-368B62F06E0E", "versionEndIncluding": "2.0.9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter."}], "id": "CVE-2001-1352", "lastModified": "2024-11-20T23:37:29.170", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2001-12-27T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=100947261916155&w=2"}, {"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=101060476404565&w=2"}, {"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=101068116016472&w=2"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/5691"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7875"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=100947261916155&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=101060476404565&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=101068116016472&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/5691"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7875"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2001:179", "cpe": "cpe:/o:redhat:linux:7.0j", "product_name": "Red Hat Linux 7.0j", "release_date": "2002-07-09T00:00:00Z"}], "bugzilla": {"description": "security flaw", "id": "1616673", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616673"}, "csaw": false, "details": ["Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter."], "name": "CVE-2001-1352", "public_date": "2001-12-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2001-1352\nhttps://nvd.nist.gov/vuln/detail/CVE-2001-1352"]}