CVE-2002-0539

Published: Jul 3, 2002Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie.

Affected (2)

Products: Demarc Security: Puresecure

Demarc Security

1 product

Puresecure

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Demarc Security Puresecure	Version 1.0.5_for_unix
Demarc Security Puresecure	Version 1.0.5_for_windows

References (10)

http://archives.neohapsis.com/archives/bugtraq/2002-04/0168.html

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://online.securityfocus.com/archive/1/267941

Source: cve@mitre.org

Patch

http://www.iss.net/security_center/static/8854.php

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/5239

Source: cve@mitre.org

http://www.securityfocus.com/bid/4520

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2002-04/0168.html