CVE-2002-0513 The PHP administration script in popper_mod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows remote attackers to gain privileges if the script is not appropriately configured....
HighCVSS 10.0
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The PHP administration script in popper_mod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows remote attackers to gain privileges if the script is not appropriately configured by the administrator.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symatec popper mod | = 1.0 | No fix listed |
| symatec popper mod | = 1.2 | No fix listed |
| symatec popper mod | = 1.2.1 | No fix listed |
References
- 20020330 popper_mod 1.2.1 and previous accounts compromise mailing-list vendor-advisory
- symatec-popper-admin-access(8746) patch vdb-entry vendor-advisory
- 4412 patch vdb-entry vendor-advisory
- www.symatec-computer.com url-repurposed