CVE-2002-1021 BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.
MediumCVSS 5.0
EPSS 3.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| working resources inc badblue | = 1.7.3_enterprise | No fix listed |
| working resources inc badblue | = 1.7.3_personal | No fix listed |
References
- 20020712 Three BadBlue Vulnerabilities mailing-list
- badblue-null-file-disclosure(9557) vdb-entry vendor-advisory
- 5226 exploit vdb-entry vendor-advisory