CVE-2002-0776

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://hostingcontroller.com/english/logs/sp2log.htmlPatch, Vendor Advisory
http://online.securityfocus.com/archive/1/282129Exploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9554.php
http://www.securityfocus.com/bid/5229
http://hostingcontroller.com/english/logs/sp2log.htmlPatch, Vendor Advisory
http://online.securityfocus.com/archive/1/282129Exploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9554.php
http://www.securityfocus.com/bid/5229

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-077710.0Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind D CVE-2002-07787.5The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connection CVE-2002-07795.0FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a c CVE-2002-07805.0IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a CVE-2002-07815.0RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed b CVE-2002-07825.0Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the conne CVE-2002-07837.5Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the loca CVE-2002-07845.0Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ...CVE-2002-07855.0AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName paramete CVE-2002-07865.0iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary fi CVE-2002-07877.5Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers CVE-2002-07885.5An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext