PT-2002-1155 · Funk · Funk Software Proxy Host

Publicado 2002-04-22 · Atualizado 2008-09-10 · CVE-2002-0066

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Funk Software Proxy Host versions 3.x before 3.09A

Description The issue allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges due to a Named Pipe that does not require authentication and is installed with insecure access control.

Recommendations For versions prior to 3.09A, update to version 3.09A or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-0066

Produtos afetados

Funk Software Proxy Host

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0066 · Nota de Segurança
• http://razor.bindview.com/publish/advisories/adv_FunkProxy.html · Aviso do Fabricante
• http://securityfocus.com/bid/4460 · Nota
• http://iss.net/security_center/static/8793.php · Nota