CVEvulnerability
CVE-2002-0235
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-05-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the correct username and password in plaintext in an error event.
Affected configurations
• castelle faxpress 6.3
References
- http://online.securityfocus.com/archive/1/254168 Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8086.php Vendor Advisory
- http://www.securityfocus.com/bid/4030 Vendor Advisory
- http://online.securityfocus.com/archive/1/254168 Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8086.php Vendor Advisory
- http://www.securityfocus.com/bid/4030 Vendor Advisory