CVE-2002-0107
Medium
Description
Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.
SeverityMedium
CVSS5.0
Exploit probability—
ProductCacheflow Cacheos
PublishedMar 25, 2002
First seenMar 25, 2002
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cacheflow cacheos | 0.0, 3.1.02, 3.1.03, 3.1.04, 3.1.05, 3.1.06, 3.1.07, 3.1.08, 3.1.09, 3.1.10, 3.1.11, 3.1.12, 3.1.13, 3.1.14, 3.1.15, 3.1.16, 3.1.17, 3.1.18, 3.1.19, 3.1.20, 4.0.11, 4.0.12, 4.0.13 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.