critical10.0Public exploit code
CVE-2002-0599
Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs such as dostuff.php ins…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Blahz-DNS 0.2 - Direct Script Call Authentication Bypass2002-04-28 · webapps · php · Verified
Impact
Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs such as dostuff.php instead of going through the login screen.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blahz-Dns | Blahz-Dns | Version 0.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0395.html
- http://sourceforge.net/project/shownotes.php?release_id=87004
- http://www.iss.net/security_center/static/8951.php
- http://www.osvdb.org/5178
- http://www.securityfocus.com/bid/4618
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0395.html
- http://sourceforge.net/project/shownotes.php?release_id=87004
- http://www.iss.net/security_center/static/8951.php
- http://www.osvdb.org/5178
- http://www.securityfocus.com/bid/4618