CVEvulnerability

CVE-2002-0107

5.0 MEDIUM Published 2002-03-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-03-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.

Affected configurations

• cacheflow cacheos 0.0 • cacheflow cacheos 3.1.02 • cacheflow cacheos 3.1.03 • cacheflow cacheos 3.1.04 • cacheflow cacheos 3.1.05 • cacheflow cacheos 3.1.06 • cacheflow cacheos 3.1.07 • cacheflow cacheos 3.1.08 • cacheflow cacheos 3.1.09 • cacheflow cacheos 3.1.10 • cacheflow cacheos 3.1.11 • cacheflow cacheos 3.1.12 • cacheflow cacheos 3.1.13 • cacheflow cacheos 3.1.14 • cacheflow cacheos 3.1.15 • cacheflow cacheos 3.1.16 • cacheflow cacheos 3.1.17 • cacheflow cacheos 3.1.18 • cacheflow cacheos 3.1.19 • cacheflow cacheos 3.1.20 • cacheflow cacheos 4.0.11 • cacheflow cacheos 4.0.12 • cacheflow cacheos 4.0.13

Related

Referenced by CWE · observed example (1)

  • CWE-234 Failure to Handle Missing Parameter weakness

References