{"api_version":"1","generated_at":"2026-07-23T03:23:22+00:00","cve":"CVE-2002-1065","urls":{"html":"https://cve.report/CVE-2002-1065","api":"https://cve.report/api/cve/CVE-2002-1065.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2002-1065","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-1065"},"summary":{"title":"CVE-2002-1065","description":"Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing.","state":"PUBLISHED","assigner":"mitre","published_at":"2002-10-04 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","name":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Neohapsis Archives - Bugtraq - SECURITY.NNOV: multiple vulnerabilities in JanaServer - From 3APA3A_at_SECURITY.NNOV.RU","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.iss.net/security_center/static/9688.php","name":"http://www.iss.net/security_center/static/9688.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"ISS X-Force Database: jana-pop3-bruteforce (9688): Jana Server POP3 username/password brute force","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-1065","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1065","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2002","cve_id":"1065","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1065","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"1.45","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1065","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"1.46","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1065","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1065","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"2.0_beta1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1065","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"2.0_beta2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1065","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"t._hauck","cpe5":"jana_web_server","cpe6":"2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T03:12:17.033Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20020726 SECURITY.NNOV: multiple vulnerabilities in JanaServer","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html"},{"name":"jana-pop3-bruteforce(9688)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/9688.php"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2002-07-26T00:00:00.000Z","descriptions":[{"lang":"en","value":"Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2002-09-10T09:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20020726 SECURITY.NNOV: multiple vulnerabilities in JanaServer","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html"},{"name":"jana-pop3-bruteforce(9688)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/9688.php"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-1065","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20020726 SECURITY.NNOV: multiple vulnerabilities in JanaServer","refsource":"BUGTRAQ","url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html"},{"name":"jana-pop3-bruteforce(9688)","refsource":"XF","url":"http://www.iss.net/security_center/static/9688.php"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2002-1065","datePublished":"2002-08-31T04:00:00.000Z","dateReserved":"2002-08-30T00:00:00.000Z","dateUpdated":"2024-08-08T03:12:17.033Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2002-10-04 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09026053-0568-4D8F-AEB0-F7850C655635"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"D4505B16-611E-422F-995D-748281466621"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"525A467E-9EFF-47AE-AEBC-BE769073A64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"1812EAA2-85E0-47CE-A704-646AF4AA5CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"CD6D91CA-E975-49CF-BF32-1E0302D5D8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD2CDD0D-387C-413A-B2E8-DB18A7E3FD3B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2002","CveId":"1065","Ordinal":"1","Title":"CVE-2002-1065","CVE":"CVE-2002-1065","Year":"2002"},"notes":[{"CveYear":"2002","CveId":"1065","Ordinal":"1","NoteData":"Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing.","Type":"Description","Title":"CVE-2002-1065"},{"CveYear":"2002","CveId":"1065","Ordinal":"2","NoteData":"2002-08-31","Type":"Other","Title":"Published"},{"CveYear":"2002","CveId":"1065","Ordinal":"3","NoteData":"2002-09-10","Type":"Other","Title":"Modified"}]}}}