{"api_version":"1","generated_at":"2026-07-23T08:08:34+00:00","cve":"CVE-2002-1062","urls":{"html":"https://cve.report/CVE-2002-1062","api":"https://cve.report/api/cve/CVE-2002-1062.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2002-1062","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-1062"},"summary":{"title":"CVE-2002-1062","description":"Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.","state":"PUBLISHED","assigner":"mitre","published_at":"2002-10-04 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.iss.net/security_center/static/9684.php","name":"http://www.iss.net/security_center/static/9684.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"ISS X-Force Database: jana-socks5-bo (9684): Jana Server SOCKS5 Username/Password/Hostname buffer overflow","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/5321","name":"http://www.securityfocus.com/bid/5321","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"T. Hauck Jana Server SOCKS5 Proxy Server Authentication Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","name":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Neohapsis Archives - Bugtraq - SECURITY.NNOV: multiple vulnerabilities in JanaServer - From 3APA3A_at_SECURITY.NNOV.RU","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-1062","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1062","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2002","cve_id":"1062","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1062","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"1.45","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1062","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"1.46","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1062","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1062","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"2.0_beta1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1062","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"2.0_beta2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1062","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T03:12:16.891Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20020726 SECURITY.NNOV: multiple vulnerabilities in JanaServer","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html"},{"name":"jana-socks5-bo(9684)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/9684.php"},{"name":"5321","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/5321"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2002-07-26T00:00:00.000Z","descriptions":[{"lang":"en","value":"Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2002-09-10T09:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20020726 SECURITY.NNOV: multiple vulnerabilities in JanaServer","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html"},{"name":"jana-socks5-bo(9684)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/9684.php"},{"name":"5321","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/5321"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-1062","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20020726 SECURITY.NNOV: multiple vulnerabilities in JanaServer","refsource":"BUGTRAQ","url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html"},{"name":"jana-socks5-bo(9684)","refsource":"XF","url":"http://www.iss.net/security_center/static/9684.php"},{"name":"5321","refsource":"BID","url":"http://www.securityfocus.com/bid/5321"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2002-1062","datePublished":"2002-08-31T04:00:00.000Z","dateReserved":"2002-08-30T00:00:00.000Z","dateUpdated":"2024-08-08T03:12:16.891Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2002-10-04 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09026053-0568-4D8F-AEB0-F7850C655635"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"D4505B16-611E-422F-995D-748281466621"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"525A467E-9EFF-47AE-AEBC-BE769073A64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"1812EAA2-85E0-47CE-A704-646AF4AA5CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"CD6D91CA-E975-49CF-BF32-1E0302D5D8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD2CDD0D-387C-413A-B2E8-DB18A7E3FD3B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2002","CveId":"1062","Ordinal":"1","Title":"CVE-2002-1062","CVE":"CVE-2002-1062","Year":"2002"},"notes":[{"CveYear":"2002","CveId":"1062","Ordinal":"1","NoteData":"Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.","Type":"Description","Title":"CVE-2002-1062"},{"CveYear":"2002","CveId":"1062","Ordinal":"2","NoteData":"2002-08-31","Type":"Other","Title":"Published"},{"CveYear":"2002","CveId":"1062","Ordinal":"3","NoteData":"2002-09-10","Type":"Other","Title":"Modified"}]}}}