CVE-2002-2170 - CVE House
Back to Database
Status published High CVE-2002-2170

Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts...

Vulnerability Description

Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request that accesses the dir.hts page on the localhost and adds an entire hard drive to be shared.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-2170

Credits & Attribution

No credits recorded in the NVD database.

References

More from working resources inc.

View All →
CVE-2005-0595
Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers...
High 7.5
CVE-2004-2374
BadBlue 2.4 allows remote attackers to obtain the location of...
Medium 5
CVE-2004-1727
BadBlue 2.5 allows remote attackers to cause a denial of...
Medium 5
CVE-2003-0332
The ISAPI extension in BadBlue 1.7 through 2.2, and possibly...
High 7.6
CVE-2002-2289
soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows...
Medium 5

Affected Vendor

working resources inc.

View all reports →

Affected Software

badblue
Vulnerable Versions:
enterprise_1.7, enterprise_1.7.2, enterprise_1.7.3, enterprise_1.7.4

Timeline

Official Publish: November 16th, 2005
Last Modified: September 17th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.