PT-2002-2422 · Asp · Asp Client Check

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1699

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ASP Client Check (ASPCC) versions 1.3 through 1.5

Description The issue allows remote attackers to bypass authentication and gain unauthorized access via the password field. This is due to a SQL injection vulnerability.

Recommendations For ASP Client Check (ASPCC) versions 1.3 through 1.5, update to a version that fixes this issue to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1699

Affected Products

Asp Client Check

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1699 · Security Note
• http://securityfocus.com/bid/4676 · Patch
• http://osvdb.org/21558 · Note
• http://securiteam.com/windowsntfocus/5BP031P75C.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9015 · Note