PT-2002-1927 · Cgiscript.Net · Cgiscript.Net Cspassword.Cgi

Published 2002-08-31 · Updated 2008-09-05 · CVE-2002-0917

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: CGIScript.net csPassword.cgi (affected versions not specified)

Description: The issue concerns the storage of .htpasswd files under the web document root by CGIScript.net csPassword.cgi, potentially allowing remote authenticated users to download the file and crack the passwords of other users.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-0917

Affected Products

Cgiscript.Net Cspassword.Cgi

References · 4

• http://securityfocus.com/bid/4885 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0917 · Security Note
• http://iss.net/security_center/static/9220.php · Vendor Advisory
• http://online.securityfocus.com/archive/1/274727 · Note