high7.5Public exploit code
CVE-2002-0095
The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote atta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BSCW 3.4/4.0 - Insecure Default Installation2002-01-03 · remote · multiple · Verified
Impact
The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fraunhofer Fit | Bscw | Versions 3.4, 4.0, 4.0.6 |