CVE-2002-0705 The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames an...
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames and crack the passwords.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| surfcontrol superscout web filter | = 3.0 | No fix listed |
| surfcontrol superscout web filter | = 3.0.3 | No fix listed |
| surfcontrol web filter | = 4.0 | No fix listed |
| surfcontrol web filter | = 4.1 | No fix listed |
References
- 20021002 wp--02-0005: Multiple Vulnerabilities in SuperScout Web Reports Server mailing-list
- superscout-webfilter-information-retrieval(10248) vdb-entry
- 3489 vdb-entry
- 5856 vdb-entry
- www.westpoint.ltd.uk