high7.5
CVE-2002-0706
UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers t…
Impact
UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Surfcontrol | Superscout Web Filter | Versions 3.0, 3.0.3 |
| Surfcontrol | Web Filter | Versions 4.0, 4.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=103359690824103&w=2
- http://www.iss.net/security_center/static/10247.php
- http://www.osvdb.org/3491
- http://www.westpoint.ltd.uk/advisories/wp-02-0005.txt
- http://marc.info/?l=bugtraq&m=103359690824103&w=2
- http://www.iss.net/security_center/static/10247.php
- http://www.osvdb.org/3491
- http://www.westpoint.ltd.uk/advisories/wp-02-0005.txt