[ZTE ZMAX Guides, News, & Discussion] sketchscarz:
Attack Vector Specifications, requirements and resources

CVSS v2 Vector Definitions

Every application or service that uses the Common Vulnerability Scoring System (CVSS) should provide not only the CVSS score, but also a vector describing the components from which the score was calculated. This provides users of the score confidence in its correctness and provides insight into the nature of the vulnerability.

CVSS vectors always include base metrics and may contain temporal metrics. See the CVSS standard's guide (this is the version 1.0 guide) for detailed descriptions of CVSS metrics and their possible values.

CVSS Base Vectors

CVSS vectors containing only base metrics take the following form:

(AV:[L,A,N]/AC:[H,M,L]/Au:[N,S,M]/C:[N,P,C]/I:[N,P,C]/A:[N,P,C])

The letters within brackets represent possible values of a CVSS metric. Exactly one option must be chosen for each set of brackets. Letters not within brackets are mandatory and must be included in order to create a valid CVSS vector. Each letter or pair of letters is an abbreviation for a metric or metric value within CVSS. These abbreviations are defined below.

Example 1: (AV:L/AC:H/Au:N/C:N/I:P/A:C)

Example 2: (AV:A/AC:L/Au:M/C:C/I:N/A:P)

Metric: AV = AccessVector (Related exploit range)

Possible Values: L = Local access, A = Adjacent network, N = Network

Metric: AC = AccessComplexity (Required attack complexity)

Possible Values: H = High, M = Medium, L = Low

Metric: Au = Authentication (Level of authentication needed to exploit)

Possible Values: N= None required, S= Requires single instance, M= Requires multiple instances

Metric: C = ConfImpact (Confidentiality impact)

Possible Values: N = None, P = Partial, C = Complete

Metric: I = IntegImpact (Integrity impact)

Possible Values: N = None, P = Partial, C = Complete

Metric: A = AvailImpact (Availability impact)<> Possible Values: N = None, P = Partial, C = Complete

CVSS Temporal Vectors

CVSS vectors containing temporal metrics are formed by appending the temporal metrics to the base vector. The temporal metrics appended to the base vector take the following form:

/E:[U,POC,F,H,ND]/RL:[OF,T,W,U,ND]/RC:[UC,UR,C,ND]

Example 1: (AV:L/AC:H/Au:N/C:N/I:P/A:C/E:POC/RL:eek:F/RC:C)

Example 2: (AV:L/AC:L/Au:M/C:C/I:N/A:P/E:F/RL:T/RC:UR)

Metric: E = Exploitability (Availability of exploit)

Possible Values: U = Unproven, POC = Proof-of-concept, F = Functional, H = High, ND = Not Defined

Metric: RL = RemediationLevel (Type of fix available)

Possible Values: OF = Official-fix, T = Temporary-fix, W = Workaround, U = Unavailable, ND = Not Defined

Metric: RC = ReportConfidence (Level of verification that the vulnerability exists)

Possible Values: UC = Unconfirmed, UR = Uncorroborated, C = Confirmed, ND = Not Defined

CVSS Environmental Vectors

CVSS vectors containing environmental metrics are formed by appending the environmental metrics to the temporal vector. The environmental metrics appended to the temporal vector take the following form:

/CDP[N,L,LM,MH,H,ND]:/TD:[N,L,M,H,ND]/CR:[L,M,H,ND]/IR:[L,M,H,ND]/AR:[L,M,H,ND]

Example 1: (AV:L/AC:H/Au:N/C:N/I:P/A:C/E:POC/RL:eek:F/RC:C/CDP:L/TD:M/CR:L/IR:L/AR:H)

Example 2: (AV:L/AC:L/Au:M/C:C/I:N/A:P/E:F/RL:T/RC:UR/CDP:MH/TD:H/CR:M/IR:L/AR:M)

Metric: CDP = Collateral Damage Potential (Organization specific potential for loss)

Possible Values: N = None, L = Low, LM = Low-Medium, MH = Medium-High, H = High, ND = Not Defined

Metric: TD = Target Distribution (Percentage of vulnerable systems)

Possible Values: N = None (0%), L = Low (1-25%), M = Medium (26-75%), H = High (76-100%), ND = Not Defined

Metric: CR = System Confidentiality Requirement (draft proposal)

Possible Values: L = Low, M = Medium, H = High, ND = Not Defined

Metric: IR = System Integrity Requirement (draft proposal)

Possible Values: L = Low, M = Medium, H = High, ND = Not Defined

Metric: AR = System Availability Requirement (draft proposal)

Possible Values: L = Low, M = Medium, H = High, ND = Not Defined

CVSS Vectors and CVSS Compatible Products

CVSS compatible products may provide their users access to the NVD CVSS v2 calculator by creating a hyperlink that includes the CVSS vector and, optionally, the vulnerability name. This works for both base and temporal vectors. The hyperlinks should take one of the following forms.

Example base vector hyperlinks to CVSS calculator (with and without vulnerability name):

1. http://nvd.nist.gov/CVSS/CVSS-v2-Calculator?vector=(AV:L/AC:H/Au:N/C:N/I:P/A:C)

2. http://nvd.nist.gov/CVSS/CVSS-v2-Calculator?name=example&vector=(AV:A/AC:L/Au:M/C:C/I:N/A:P)

Example temporal vector hyperlinks to CVSS calculator (with and without vulnerability name):

1. http://nvd.nist.gov/CVSS/CVSS-v2-Calculator?vector=(AV:L/AC:H/Au:N/C:N/I:P/A:C/E:POC/RL:eek:F/RC:C)

2. http://nvd.nist.gov/CVSS/CVSS-v2-Ca...or=(AV:A/AC:L/Au:M/C:C/I:N/A:P/E:F/RL:T/RC:UR)

---------- Post added at 08:49 AM ---------- Previous post was at 08:43 AM ----------

Impact Type: Allows unauthorized disclosure of information; Allows unauthorized modification; Allows disruption of service

External Source: SECTRACK

Name: 1031875

Hyperlink: http://www.securitytracker.com/id/1031875

External Source: BID

Name: 72788

Hyperlink: http://www.securityfocus.com/bid/72788

External Source: MISC

Name: http://packetstormsecurity.com/files/130778/Google-Android-Integer-Oveflow-Heap-Corruption.html

Hyperlink: http://packetstormsecurity.com/files/130778/Google-Android-Integer-Oveflow-Heap-Corruption.html

External Source: CONFIRM

Name: https://android.googlesource.com/pl...ve/+/38803268570f90e97452cd9a30ac831661829091

Hyperlink: https://android.googlesource.com/pl...ve/+/38803268570f90e97452cd9a30ac831661829091

Vulnerable software and versions

+ Configuration 1

+ OR

* cpe:/o:google:android:5.0 and previous versions

* Denotes Vulnerable Software

Changes related to vulnerability configurations

Technical Details

Vulnerability Type (View All)

Numeric Errors (CWE-189)

CVE Standard Vulnerability Entry http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1474

Change History 4 change records found - hide changes

CVE Dictionary change - 3/2/2015 10:00:16 PM

Action	Type	Old Value	New Value

Added	Reference

http://www.securityfocus.com/bid/72788

Quality Assurance - 2/17/2015 4:46:23 PM

Action	Type	Old Value	New Value

Added	CVSS Vector

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Added	CWE

CWE-189

Added	CPE Configuration

Configuration 1

OR

*cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:* (and previous)

CVE Dictionary change - 3/23/2015 10:02:25 PM

Action	Type	Old Value	New Value

Added	Reference

http://www.securitytracker.com/id/1031875

CVE Dictionary change - 3/17/2015 10:05:12 PM

Action	Type	Old Value	New Value

Added	Reference

http://packetstormsecurity.com/files/130778/Google-Android-Integer-Oveflow-Heap-Corruption.html