« Volver al listado

CVE-2002-0066

Estado: ModificadaAlta (7.5)—

Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Bindview — NetrcFunk Software — Funk Software Proxy

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-0066",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-04-22T04:00:00.000",
  "references": [
    {
      "url": "http://razor.bindview.com/publish/advisories/adv_FunkProxy.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/8793.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/4460",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://razor.bindview.com/publish/advisories/adv_FunkProxy.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/8793.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/4460",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges."
    },
    {
      "lang": "es",
      "value": "Funk Software Proxy Host 3.x anterior a 3.09a crea un tubería con nombre (Named Pipe) que no requiere autentificación y se instala con control de acceso inseguro, lo que permite a usuarios locales y posiblemente remotos usar las utilidades de configuración del Proxy Host y ganar privilegios."
    }
  ],
  "lastModified": "2026-06-16T21:56:41.930",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bindview:netrc:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "760DB974-6B4A-4A09-9B4F-201456DE9136"
            },
            {
              "criteria": "cpe:2.3:a:bindview:netrc:3.06:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD26D34A-F8C0-4C74-A825-6B59DA0C12D8"
            },
            {
              "criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8ECA01B9-A163-4069-8CBA-C6D019B4DB66"
            },
            {
              "criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.06:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4F701BB-4525-42A7-80AF-51D127A836B5"
            },
            {
              "criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.09:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC126FFF-687F-41AA-BC77-E577D05B4BB8"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}