Description
The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected.
References
- 20021018 interSEC security advisory - Multiple bugs in Web602 web server mailing-list
- 6006 vdb-entry
- 602pro-admin-priviliges(10408) vdb-entry