{"id":"CVE-2002-1183","aliases":["EUVD-2002-1167","GHSA-c4v9-9c8q-335m"],"status":"published","title":"Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital...","description":"Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka \"New Variant of Certificate Validation Flaw Could Enable Identity Spoofing\" (CAN-2002-0862).","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.1934,"percentile":0.97362,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2002-12-11T05:00:00Z","modified":"2026-06-16T21:58:53Z","exploits":[{"source":"exploitdb","id":"EDB-21692","title":"Microsoft Internet Explorer 5/6 / Konqueror 2.2.2/3.0 / Weblogic Server 5/6/7 - Invalid X.509 Certificate Chain","type":"remote","platform":"windows","date":"2002-08-06","verified":true,"url":"https://www.exploit-db.com/exploits/21692"}],"products":[{"vendor":"microsoft","product":"windows_98"},{"vendor":"microsoft","product":"windows_98se"},{"vendor":"microsoft","product":"windows_nt"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9776","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"http://www.securityfocus.com/bid/5410","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2108","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1455","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1059","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1183"},{"url":"https://github.com/advisories/GHSA-c4v9-9c8q-335m"}],"sources":{"cve":[{"id":"CVE-2002-1183","description":"Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka \"New Variant of Certificate Validation Flaw Could Enable Identity Spoofing\" (CAN-2002-0862).","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T03:19:27.75Z","updated_at":"2026-11-02T14:33:54.972584Z"}],"euvd":[{"id":"EUVD-2002-1167","description":"Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka \"New Variant of Certificate Validation Flaw Could Enable Identity Spoofing\" (CAN-2002-0862).","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T03:19:27Z","updated_at":"2026-11-03T01:14:57.2805Z"}],"ghsa":[{"id":"GHSA-c4v9-9c8q-335m","title":"Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital...","description":"Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka \"New Variant of Certificate Validation Flaw Could Enable Identity Spoofing\" (CAN-2002-0862).","status":"published","published":"2022-04-30T18:20:41Z","modified":"2023-01-30T05:06:06Z","updated_at":"2026-11-02T14:47:25.356505Z"}],"nvd":[{"id":"CVE-2002-1183","description":"Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka \"New Variant of Certificate Validation Flaw Could Enable Identity Spoofing\" (CAN-2002-0862).","status":"published","published":"2002-12-11T05:00:00Z","modified":"2026-06-16T21:58:53.537Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:43.239725Z"}]}}