VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 22, 2002· Updated Jun 16, 2026

CVE-2002-0066

CVE-2002-0066

Description

Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.

Affected products

6
  • Bindview/Netrc2 versions
    cpe:2.3:a:bindview:netrc:1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bindview:netrc:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:bindview:netrc:3.06:*:*:*:*:*:*:*
  • Funk Software/Funk Software Proxy4 versions
    cpe:2.3:a:funk_software:funk_software_proxy:3.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:funk_software:funk_software_proxy:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:funk_software:funk_software_proxy:3.06:*:*:*:*:*:*:*
    • cpe:2.3:a:funk_software:funk_software_proxy:3.09:*:*:*:*:*:*:*
    • (no CPE)range: <3.09A

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.