CVE-2002-0920 | BDVDB-2026-4601 Detail

Description#

CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users (and possibly remote attackers) to gain privileges by stealing the file before it has been processed.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/4889
http://online.securityfocus.com/archive/1/274727
http://www.iss.net/security_center/static/9223.php

Exploit#

No public exploit known

History#

Version 12002-08-31Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.