CVE-2002-1023

BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.

CVE-2002-1022

BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.

CVE-2002-1021

BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.