CVE-2002-0917 CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cgiscript.net cspassword | = 1.0 | No fix listed |
References
- 20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities mailing-list
- cgiscript-cspassword-htpasswd-access(9220) vdb-entry vendor-advisory
- 4885 patch vdb-entry vendor-advisory