CVEvulnerability

CVE-2002-0066

7.5 HIGH Published 2002-04-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-04-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.

Affected configurations

• bindview netrc 1.0 • bindview netrc 3.06 • funk software funk software proxy 3.0 • funk software funk software proxy 3.06 • funk software funk software proxy 3.09

Related

Referenced by CWE · observed example (2)

  • CWE-288 Authentication Bypass Using an Alternate Path or Channel weakness
  • CWE-420 Unprotected Alternate Channel weakness

References