PT-2002-2422 · Asp · Asp Client Check

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1699

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ASP Client Check (ASPCC) versions 1.3 through 1.5

Description The issue allows remote attackers to bypass authentication and gain unauthorized access via the password field. This is due to a SQL injection vulnerability.

Recommendations For ASP Client Check (ASPCC) versions 1.3 through 1.5, update to a version that fixes this issue to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-1699

Produtos afetados

Asp Client Check

Referências · 5

• http://osvdb.org/21558 · Nota
• http://securiteam.com/windowsntfocus/5BP031P75C.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1699 · Nota de Segurança
• http://securityfocus.com/bid/4676 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9015 · Nota