CVE-2002-0065

{"id": "CVE-2002-0065", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-04-22T04:00:00.000", "references": [{"url": "http://razor.bindview.com/publish/advisories/adv_FunkProxy.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/8792.php", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/4459", "source": "cve@mitre.org"}, {"url": "http://razor.bindview.com/publish/advisories/adv_FunkProxy.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.iss.net/security_center/static/8792.php", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/4459", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry."}, {"lang": "es", "value": "Funk Software Proxy Host 3.x usa cifrado d\u00e9bil para la contrase\u00f1a de Proxy Host, lo que permite a usuarios locales ganar privilegios desde le fichero PHOST.INI o el registro de Windows."}], "lastModified": "2024-11-20T23:38:13.290", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bindview:netrc:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "760DB974-6B4A-4A09-9B4F-201456DE9136"}, {"criteria": "cpe:2.3:a:bindview:netrc:3.06:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD26D34A-F8C0-4C74-A825-6B59DA0C12D8"}, {"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8ECA01B9-A163-4069-8CBA-C6D019B4DB66"}, {"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.06:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4F701BB-4525-42A7-80AF-51D127A836B5"}, {"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.09:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC126FFF-687F-41AA-BC77-E577D05B4BB8"}, {"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.09a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2A9E9AA-CC99-41E5-95C7-6DCAA0B0F6A0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}