CVE-2002-2152: Critical severity software602 602pro lan suite vulnerability

Published Dec 31, 2002

Updated

The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected.

Affected Software

1 affected component

Software602 602pro Lan Suite=2002

Remediation

Patch Available

http://www.iss.net/security_center/static/10408.php

Event History

Dec 31, 2002

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Nov 16, 2005

CVE Published

via MITRE·09:17 PM

Data Sourced

via MITRE·09:17 PM

Description

Frequently Asked Questions

What is the severity of CVE-2002-2152?

CVE-2002-2152 is considered high severity due to the possibility of remote attackers gaining administrator privileges.

How do I fix CVE-2002-2152?

To fix CVE-2002-2152, upgrade to Software602's Web Server version 2002.0.02.0916 or later, which includes proper access controls.

What systems are affected by CVE-2002-2152?

CVE-2002-2152 affects the Czech edition of Software602's Web Server prior to version 2002.0.02.0916.

Can CVE-2002-2152 be exploited remotely?

Yes, CVE-2002-2152 can be exploited remotely through unauthorized HTTP requests to the /admin/ directory.

What could be the impact of CVE-2002-2152 exploitation?

The impact of exploiting CVE-2002-2152 includes unauthorized access and control over the web server as an administrator.