PT-2002-1647 · Blahz · Blahz-Dns

Published 2002-06-18 · Updated 2008-09-05 · CVE-2002-0599

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Blahz-DNS versions 0.2 and earlier

Description The issue allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs, such as "dostuff.php", instead of going through the login screen.

Recommendations For Blahz-DNS versions 0.2 and earlier, consider restricting direct access to CGI programs like dostuff.php to prevent unauthorized configuration modifications.

Exploit

Fix

Related Identifiers

CVE-2002-0599

Affected Products

Blahz-Dns

References · 7

• 🔥 https://exploit-db.com/exploits/21426 · Exploit
• 🔥 http://securityfocus.com/bid/4618 · Exploit
• http://iss.net/security_center/static/8951.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0599 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-04/0395.html · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=87004 · Note
• http://osvdb.org/5178 · Note