7.5
CVE-2002-0917
- EPSS 2.43%
- Veröffentlicht 04.10.2002 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:58:23
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cgiscript.Net ≫ Cspassword Version1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.43% | 0.821 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://online.securityfocus.com/archive/1/274727
http://www.iss.net/security_center/static/9220.php
http://www.securityfocus.com/bid/4885