CVEvulnerability
CVE-2002-0736
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.
Affected configurations
• microsoft backoffice 4.0
• microsoft backoffice 4.5
References
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0208.html archives.neohapsis.com
- http://support.microsoft.com/support/kb/articles/q316/8/38.asp Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8862.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4528 Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0208.html archives.neohapsis.com
- http://support.microsoft.com/support/kb/articles/q316/8/38.asp Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8862.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4528 Patch, Vendor Advisory