EUVD-2002-1011

Malware in sbrugna...

CVE-2002-1022

CVE-2002-1022 affects BadBlue server. The vulnerability arises because passwords are stored in plaintext in the ext.ini file, enabling local and possibly remote attackers to escalate privileges. The connected documents corroborate the plaintext storage and the potential privilege gain, but do not...

BadBlue Hex-encoded Null Byte Request Arbitrary File Access

The remote host is running the BadBlue web server. It was possible to read the contents of 'EXT.ini', the BadBlue configuration file, by sending a specially crafted GET request. C Tenable Network Security, Inc. untested Script audit and contributions from Carmichael Security Erik Anderson Added...