← voltar
CVE-2002-2175

CVE-2002-2175

EPSS 5.8%
phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://marc.info/?l=bugtraq&m=102508071021631&w=2http://sourceforge.net/forum/forum.php?forum_id=188359http://www.iss.net/security_center/static/9417.phphttp://www.securityfocus.com/bid/5090