mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 17:21:36 +00:00
133 lines
4.0 KiB
JSON
133 lines
4.0 KiB
JSON
{
|
|
"id": "CVE-2002-0065",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2002-04-22T04:00:00.000",
|
|
"lastModified": "2025-04-03T01:03:51.193",
|
|
"vulnStatus": "Deferred",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Funk Software Proxy Host 3.x usa cifrado d\u00e9bil para la contrase\u00f1a de Proxy Host, lo que permite a usuarios locales ganar privilegios desde le fichero PHOST.INI o el registro de Windows."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
|
|
"baseScore": 7.2,
|
|
"accessVector": "LOCAL",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "COMPLETE",
|
|
"integrityImpact": "COMPLETE",
|
|
"availabilityImpact": "COMPLETE"
|
|
},
|
|
"baseSeverity": "HIGH",
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 10.0,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": true,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "NVD-CWE-Other"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bindview:netrc:1.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "760DB974-6B4A-4A09-9B4F-201456DE9136"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:bindview:netrc:3.06:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AD26D34A-F8C0-4C74-A825-6B59DA0C12D8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8ECA01B9-A163-4069-8CBA-C6D019B4DB66"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.06:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C4F701BB-4525-42A7-80AF-51D127A836B5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.09:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "FC126FFF-687F-41AA-BC77-E577D05B4BB8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.09a:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A2A9E9AA-CC99-41E5-95C7-6DCAA0B0F6A0"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://razor.bindview.com/publish/advisories/adv_FunkProxy.html",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Patch",
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.iss.net/security_center/static/8792.php",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/4459",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://razor.bindview.com/publish/advisories/adv_FunkProxy.html",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Patch",
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.iss.net/security_center/static/8792.php",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/4459",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
}
|
|
]
|
|
} |