Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2002-0502

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Citrix Nfuse是一种application portal server，通过WEB浏览器可以提供WEB服务器上某些应用程序的功能。 Citrix NFuse利用了会话cookie来验证用户身份，成功登录后，直接访问applist.asp将显示所有会话相关的applications。 如果关闭浏览器或者通过logout.asp注销，这个cookie将被删除。但是当用户使用了NFuse会话后没有关闭浏览器，而是简单地在地址栏处输入其它URL，则这个cookie被保留下来。之后的某个浏览器使用者简单地

AI Predicted 5.3 Difficulty: Trivial EPSS 3.59% · P89

Public Exploits 1

ExploitDB · 1 EDB-21235 [remote]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2002-0502

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp page.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Citrix Nfuse泄漏应用程序列表漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Citrix Nfuse是一种application portal server，通过WEB浏览器可以提供WEB服务器上某些应用程序的功能。 Citrix NFuse利用了会话cookie来验证用户身份，成功登录后，直接访问applist.asp将显示所有会话相关的applications。 如果关闭浏览器或者通过logout.asp注销，这个cookie将被删除。但是当用户使用了NFuse会话后没有关闭浏览器，而是简单地在地址栏处输入其它URL，则这个cookie被保留下来。之后的某个浏览器使用者简单地
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2002-0502

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-0502

请登录查看更多情报信息。

Vendor Advisories for CVE-2002-0502 (4)

Same Patch Batch · n/a · 2002-06-11 · 167 CVEs total

CVE-2002-0549 Anthill存在跨站脚本执行漏洞
CVE-2002-0530 Microsoft Internet Explorer BR549.DLL ActiveX控件缓冲区溢出漏洞(MS03-032)
CVE-2002-0533 PHPBB BBCode导致拒绝服务攻击漏洞
CVE-2002-0534 PostBoard BBCode存在拒绝服务攻击漏洞
CVE-2002-0535 PostBoard IMG标记脚本执行漏洞
CVE-2002-0537 StepWeb搜索引擎管理员页面访问漏洞
CVE-2002-0540 Nortel CVX 1800多服务访问网关存在默认SNMP口令漏洞
CVE-2002-0541 Tivoli Storage Manager提交用户名过长导致缓冲溢出漏洞
CVE-2002-0544 Abyss Web Server明文管理绕过漏洞
CVE-2002-0547 Nullsoft Winamp Minibrowser ID3v2缓冲区溢出漏洞
CVE-2002-0548 Anthill postbug.php认证可绕过漏洞
CVE-2002-0555 IBM Informix Web DataBlade SQL查询语句HTML条目自动解码漏洞
CVE-2002-0559 Oracle 9iAS PL/SQL Apache模块存在多个缓冲区溢出漏洞
CVE-2002-0558 TYPSoft FTP Server目录遍历漏洞
CVE-2002-0557 OpenBSD rexecd、rshd、atrun BSD错误认证实现漏洞
CVE-2002-0556 Quik-Serv Web服务器任意文件泄露漏洞
CVE-2002-0552 Melange聊天系统melange.conf配置行处理存在缓冲区溢出漏洞
CVE-2002-0550 Dynamic Guestbook远程执行任意命令漏洞
CVE-2002-0551 Dynamic Guestbook存在跨站脚本执行漏洞
CVE-2002-0529 HP Photosmart Mac OS X打印驱动程序文件权限不正确漏洞

Showing top 20 of 167 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-0502

No comments yet

Leave a comment