PT-2002-1193 · Cacheflow · Cacheflow Cacheos

Published 2002-03-25 · Updated 2016-10-18 · CVE-2002-0107

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CacheFlow CacheOS versions 4.0.13 and earlier

Description The web administration interface in CacheFlow CacheOS allows remote attackers to obtain sensitive information via a series of GET requests that do not end with 'HTTP/1.0' or another version string. This causes the information to be leaked in the error message.

Recommendations For CacheFlow CacheOS versions 4.0.13 and earlier, consider restricting access to the web administration interface until a fix is available. As a temporary workaround, ensure that all GET requests to the interface include a valid HTTP version string to prevent information leakage.

Exploit

Fix

Related Identifiers

CVE-2002-0107

Affected Products

Cacheflow Cacheos

References · 6

• 🔥 http://securityfocus.com/bid/3841 · Exploit
• 🔥 https://exploit-db.com/exploits/21212 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/254167 · Exploit
• http://iss.net/security_center/static/7835.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0107 · Security Note
• http://marc.info/?l=bugtraq&m=101052887431488&w=2 · Note