CVE-2002-0513

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The PHP administration script in popper_mod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows remote attackers to gain privileges if the script is not appropriately configured by the administrator.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/265438Vendor Advisory
http://www.iss.net/security_center/static/8746.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4412Patch, Vendor Advisory
http://www.symatec-computer.com/forums/viewtopic.php?t=14URL Repurposed
http://online.securityfocus.com/archive/1/265438Vendor Advisory
http://www.iss.net/security_center/static/8746.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4412Patch, Vendor Advisory
http://www.symatec-computer.com/forums/viewtopic.php?t=14URL Repurposed

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-05145.0PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to determine if a port is be CVE-2002-05155.0IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which allows remote attac CVE-2002-051610.0SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a co CVE-2002-05177.2Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users CVE-2002-05185.0The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of servic CVE-2002-05207.5Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users b CVE-2002-05215.1Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nu CVE-2002-05227.5ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" cookie.CVE-2002-05235.0ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.CVE-2002-05245.0ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-inc.asp with incorrect CVE-2002-052510.0Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gai CVE-2002-05267.2Vulnerability in (1) inews or (2) rnews for INN 2.2.3 and earlier, related to insecure open() calls.