high7.5
CVE-2002-1022
BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.
Impact
BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Working Resources Inc. | Badblue | Versions 1.7.3_enterprise, 1.7.3_personal |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html
- http://www.iss.net/security_center/static/9558.php
- http://www.securityfocus.com/bid/5228
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html
- http://www.iss.net/security_center/static/9558.php
- http://www.securityfocus.com/bid/5228