CVE Vulnerabilities

CVE-2002-0066

Published: Apr 22, 2002 | Modified: Sep 10, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Hosts configuration utilities and gain privileges.

Affected Software

Name Vendor Start Version End Version
Netrc Bindview 1.0 (including) 1.0 (including)
Netrc Bindview 3.06 (including) 3.06 (including)
Funk_software_proxy Funk_software 3.0 (including) 3.0 (including)
Funk_software_proxy Funk_software 3.06 (including) 3.06 (including)
Funk_software_proxy Funk_software 3.09 (including) 3.09 (including)

References