CVE-2002-0599 Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs such as dostuff.php instead of going through the login screen.
HighCVSS 10.0
EPSS 11.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs such as dostuff.php instead of going through the login screen.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blahz-dns | = 0.2 | No fix listed |
References
- 20020428 Blahz-DNS: Authentication bypass vulnerability mailing-list patch vendor-advisory
- sourceforge.net
- blahzdns-auth-bypass(8951) patch vdb-entry vendor-advisory
- 5178 vdb-entry
- 4618 exploit patch vdb-entry vendor-advisory