20021008 Four Vulnerabilities in SurfControl's SuperScout Email Filter Administrative Servermailing list
http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html CVE-2002-1530
SurfControl SuperScout Email Filter 3.5 - User Credential Disclosure
Record summary
CVE-2002-1530 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSurfControl SuperScout Email Filter 3.5 - User Credential DisclosureExploitDB exploitby ken@FTUNot analyzed1 file
References
4superscout-emailfilter-plaintext-passwords(10320)vdb entry
http://www.iss.net/security_center/static/10320.php 5929vdb entry
http://www.securityfocus.com/bid/5929 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-1530