CVE-2002-0920 in CGIScript.net csPassword
摘要 (英语)
CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users (and possibly remote attackers) to gain privileges by stealing the file before it has been processed.
披露
2002-10-04
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 18857 | CGIScript.net csPassword Temp csPassword.cgi 密码 信息公开 | 200 | 未定义 | 官方修复 | CVE-2002-0920 |