Lucene search

[email protected]CVE-2002-0705

HistoryOct 10, 2002 - 4:00 a.m.

CVE-2002-0705

2002-10-1004:00:00

[email protected]

web.nvd.nist.gov

surfcontrol

superscout

webfilter

web reports server

credentials

vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.6%

JSON

The Web Reports Server for SurfControl SuperScout WebFilter stores the “scwebusers” username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames and crack the passwords.

Affected configurations

NVD

Node

surfcontrolsuperscout_web_filterMatch3.0

surfcontrolsuperscout_web_filterMatch3.0.3

surfcontrolweb_filterMatch4.0

surfcontrolweb_filterMatch4.1

CPENameOperatorVersion
surfcontrol:superscout_web_filtersurfcontrol superscout web filtereq3.0
surfcontrol:superscout_web_filtersurfcontrol superscout web filtereq3.0.3
surfcontrol:web_filtersurfcontrol web filtereq4.0
surfcontrol:web_filtersurfcontrol web filtereq4.1

CPE	Name	Operator	Version
surfcontrol:superscout_web_filter	surfcontrol superscout web filter	eq	3.0
surfcontrol:superscout_web_filter	surfcontrol superscout web filter	eq	3.0.3
surfcontrol:web_filter	surfcontrol web filter	eq	4.0
surfcontrol:web_filter	surfcontrol web filter	eq	4.1

References

marc.info/?l=bugtraq&m=103359690824103&w=2

www.iss.net/security_center/static/10248.php

www.osvdb.org/3489

www.securityfocus.com/bid/5856

www.westpoint.ltd.uk/advisories/wp-02-0005.txt

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.6%

JSON

Related for CVE-2002-0705

cvelist1 nvd1 securityvulns1