CVE

Id
6552  
CVE No.
CVE-2002-2170  
Status
Candidate  
Description
Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request that accesses the dir.hts page on the localhost and adds an entire hard drive to be shared.  
Phase
Assigned (20051116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
37122 6552 CVE-2002-2170 BUGTRAQ:20020720 BadBlue - Unauthorized Administrative Command Execution  View
37123 6552 CVE-2002-2170 URL:http://online.securityfocus.com/archive/1/283418  View
37124 6552 CVE-2002-2170 BID:5276  View
37125 6552 CVE-2002-2170 URL:http://www.securityfocus.com/bid/5276  View
37126 6552 CVE-2002-2170 XF:badblue-unauth-admin-access(9642)  View

Related JVN