{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2002-04-08T00:00:00", "descriptions": [{"lang": "en", "value": "Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2002-06-16T00:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "funk-proxy-weak-password(8792)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "http://www.iss.net/security_center/static/8792.php"}, {"name": "4459", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/4459"}, {"name": "20020408 Unauthorized remote control access to systems running Funk Software's Proxy v3.x", "tags": ["vendor-advisory", "x_refsource_BINDVIEW"], "url": "http://razor.bindview.com/publish/advisories/adv_FunkProxy.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2002-0065", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "funk-proxy-weak-password(8792)", "refsource": "XF", "url": "http://www.iss.net/security_center/static/8792.php"}, {"name": "4459", "refsource": "BID", "url": "http://www.securityfocus.com/bid/4459"}, {"name": "20020408 Unauthorized remote control access to systems running Funk Software's Proxy v3.x", "refsource": "BINDVIEW", "url": "http://razor.bindview.com/publish/advisories/adv_FunkProxy.html"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2002-0065", "datePublished": "2002-06-25T04:00:00", "dateReserved": "2002-02-19T00:00:00", "dateUpdated": "2002-06-16T00:00:00", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:bindview:netrc:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "760DB974-6B4A-4A09-9B4F-201456DE9136", "vulnerable": true}, {"criteria": "cpe:2.3:a:bindview:netrc:3.06:*:*:*:*:*:*:*", "matchCriteriaId": "AD26D34A-F8C0-4C74-A825-6B59DA0C12D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "8ECA01B9-A163-4069-8CBA-C6D019B4DB66", "vulnerable": true}, {"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.06:*:*:*:*:*:*:*", "matchCriteriaId": "C4F701BB-4525-42A7-80AF-51D127A836B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.09:*:*:*:*:*:*:*", "matchCriteriaId": "FC126FFF-687F-41AA-BC77-E577D05B4BB8", "vulnerable": true}, {"criteria": "cpe:2.3:a:funk_software:funk_software_proxy:3.09a:*:*:*:*:*:*:*", "matchCriteriaId": "A2A9E9AA-CC99-41E5-95C7-6DCAA0B0F6A0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry."}, {"lang": "es", "value": "Funk Software Proxy Host 3.x usa cifrado d\u00e9bil para la contrase\u00f1a de Proxy Host, lo que permite a usuarios locales ganar privilegios desde le fichero PHOST.INI o el registro de Windows."}], "id": "CVE-2002-0065", "lastModified": "2008-09-10T19:11:14.727", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2002-04-22T04:00:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://razor.bindview.com/publish/advisories/adv_FunkProxy.html"}, {"source": "cve@mitre.org", "url": "http://www.iss.net/security_center/static/8792.php"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/4459"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}