PT-2002-1155 · Funk · Funk Software Proxy Host

Published 2002-04-22 · Updated 2008-09-10 · CVE-2002-0066

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Funk Software Proxy Host versions 3.x before 3.09A

Description The issue allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges due to a Named Pipe that does not require authentication and is installed with insecure access control.

Recommendations For versions prior to 3.09A, update to version 3.09A or later to resolve the issue.

Fix

Related Identifiers

CVE-2002-0066

Affected Products

Funk Software Proxy Host

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0066 · Security Note
• http://razor.bindview.com/publish/advisories/adv_FunkProxy.html · Vendor Advisory
• http://securityfocus.com/bid/4460 · Note
• http://iss.net/security_center/static/8793.php · Note