7.5
CVE-2002-0705
- EPSS 2.45%
- Veröffentlicht 10.10.2002 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:57:58
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames and crack the passwords.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Surfcontrol ≫ Superscout Web Filter Version3.0
Surfcontrol ≫ Superscout Web Filter Version3.0.3
Surfcontrol ≫ Web Filter Version4.0
Surfcontrol ≫ Web Filter Version4.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.45% | 0.823 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://marc.info/?l=bugtraq&m=103359690824103&w=2
http://www.iss.net/security_center/static/10248.php
http://www.osvdb.org/3489
http://www.securityfocus.com/bid/5856
http://www.westpoint.ltd.uk/advisories/wp-02-0005.txt