medium5.0Public exploit code
CVE-2002-1530
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SurfControl SuperScout Email Filter 3.5 - User Credential Disclosure2002-10-08 · webapps · asp · Verified
Impact
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Surfcontrol | Superscout Email Filter | Versions 3.5, 3.5.1, 4.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html
- http://www.iss.net/security_center/static/10320.php
- http://www.securityfocus.com/bid/5929
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html
- http://www.iss.net/security_center/static/10320.php
- http://www.securityfocus.com/bid/5929