Unscored CVE-2002-0917 EUVD-2002-0908GHSA-7xcj-xxm7-w479

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download t…

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.

References

20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities mailing-list
4885 vdb-entry
cgiscript-cspassword-htpasswd-access(9220) vdb-entry