CVE-2002-0310

Published: May 31, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.

Affected (4)

Products: Netwin: Webnews

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Netwin Webnews	Version 1.1h
Netwin Webnews	Version 1.1i
Netwin Webnews	Version 1.1j
Netwin Webnews	Version 1.1k

References (6)

http://marc.info/?l=bugtraq&m=101432236729631&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/4156

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/8255

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=101432236729631&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/4156

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/8255

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.