CVE-2002-0736 | BDVDB-2026-5247 Detail

Description#

Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archives.neohapsis.com/archives/bugtraq/2002-04/0208.html
http://www.iss.net/security_center/static/8862.php
http://support.microsoft.com/support/kb/articles/q316/8/38.asp
http://www.securityfocus.com/bid/4528

Exploit#

No public exploit known

History#

Version 12003-04-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.