CVE-2002-0107 Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another ve...
MediumCVSS 5.0
EPSS 7.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cacheflow cacheos | = 0.0 | No fix listed |
| cacheflow cacheos | = 3.1.02 | No fix listed |
| cacheflow cacheos | = 3.1.03 | No fix listed |
| cacheflow cacheos | = 3.1.04 | No fix listed |
| cacheflow cacheos | = 3.1.05 | No fix listed |
| cacheflow cacheos | = 3.1.06 | No fix listed |
| cacheflow cacheos | = 3.1.07 | No fix listed |
| cacheflow cacheos | = 3.1.08 | No fix listed |
| cacheflow cacheos | = 3.1.09 | No fix listed |
| cacheflow cacheos | = 3.1.10 | No fix listed |
| cacheflow cacheos | = 3.1.11 | No fix listed |
| cacheflow cacheos | = 3.1.12 | No fix listed |
| cacheflow cacheos | = 3.1.13 | No fix listed |
| cacheflow cacheos | = 3.1.14 | No fix listed |
| cacheflow cacheos | = 3.1.15 | No fix listed |
| cacheflow cacheos | = 3.1.16 | No fix listed |
| cacheflow cacheos | = 3.1.17 | No fix listed |
| cacheflow cacheos | = 3.1.18 | No fix listed |
| cacheflow cacheos | = 3.1.19 | No fix listed |
| cacheflow cacheos | = 3.1.20 | No fix listed |
| cacheflow cacheos | = 4.0.11 | No fix listed |
| cacheflow cacheos | = 4.0.12 | No fix listed |
| cacheflow cacheos | = 4.0.13 | No fix listed |
References
- 20020108 svindel.net security advisory - web admin vulnerability in CacheOS mailing-list
- 20020205 RE: svindel.net security advisory - web admin vulnerability in Ca cheOS exploit mailing-list patch vendor-advisory
- cachos-insecure-web-interface(7835) patch vdb-entry vendor-advisory
- 3841 exploit patch vdb-entry vendor-advisory