CVEvulnerability

CVE-2002-1080

7.5 HIGH Published 2002-10-04 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2002-10-04
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as (1) srvstatus.chl, (2) consport.chl, (3) general.chl, (4) srvparam.chl, and (5) advanced.chl.

Affected configurations

• aprelium technologies abyss web server 1.0 • aprelium technologies abyss web server 1.0.3

References

http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html archives.neohapsis.com
http://www.aprelium.com/news/patch1033.html www.aprelium.com
http://www.iss.net/security_center/static/9957.php Patch, Vendor Advisory
http://www.securityfocus.com/bid/5548 Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html archives.neohapsis.com
http://www.aprelium.com/news/patch1033.html www.aprelium.com
http://www.iss.net/security_center/static/9957.php Patch, Vendor Advisory
http://www.securityfocus.com/bid/5548 Exploit, Patch, Vendor Advisory