EUVD-2002-1011

Malware in sbrugna...

CVE-2002-1022

CVE-2002-1022 affects BadBlue server. The vulnerability arises because passwords are stored in plaintext in the ext.ini file, enabling local and possibly remote attackers to escalate privileges. The connected documents corroborate the plaintext storage and the potential privilege gain, but do not...

CVE-2002-1022: Undefined Security Weakness

BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges...

CVE-2002-1021: Undefined Security Weakness

BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte...

BadBlue Hex-encoded Null Byte Request Arbitrary File Access

The remote host is running the BadBlue web server. It was possible to read the contents of 'EXT.ini', the BadBlue configuration file, by sending a specially crafted GET request. C Tenable Network Security, Inc. untested Script audit and contributions from Carmichael Security Erik Anderson Added...