CVE-2002-1183 Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw...
HighCVSS 7.5
EPSS 19.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 98 | All versions | No fix listed |
| Microsoft windows 98se | All versions | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
References
- 5410 exploit patch vdb-entry vendor-advisory
- MS02-050 vendor-advisory
- ssl-ca-certificate-spoofing(9776) vdb-entry
- oval:org.mitre.oval:def:1059 signature vdb-entry
- oval:org.mitre.oval:def:1455 signature vdb-entry
- oval:org.mitre.oval:def:2108 signature vdb-entry