CVE-2002-0066

Published Apr 22, 2002

Last updated 16 years ago

Overview

Description: Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:bindview:netrc:1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "760DB974-6B4A-4A09-9B4F-201456DE9136"
          },
          {
            "criteria": "cpe:2.3:a:bindview:netrc:3.06:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD26D34A-F8C0-4C74-A825-6B59DA0C12D8"
          },
          {
            "criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8ECA01B9-A163-4069-8CBA-C6D019B4DB66"
          },
          {
            "criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.06:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C4F701BB-4525-42A7-80AF-51D127A836B5"
          },
          {
            "criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.09:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FC126FFF-687F-41AA-BC77-E577D05B4BB8"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References