medium5.0Public exploit code
CVE-2002-1021
BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Working Resources 1.7.3 BadBlue - Null Byte File Disclosure2002-06-13 · remote · windows · Verified
Impact
BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Working Resources Inc. | Badblue | Versions 1.7.3_enterprise, 1.7.3_personal |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html
- http://www.iss.net/security_center/static/9557.php
- http://www.securityfocus.com/bid/5226
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html
- http://www.iss.net/security_center/static/9557.php
- http://www.securityfocus.com/bid/5226