CVE-2002-0705

Published: Oct 10, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames and crack the passwords.

Affected (4)

Products: Surfcontrol: Superscout Web Filter, Web Filter

Surfcontrol

2 products

Superscout Web Filter

Web Filter

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Surfcontrol Superscout Web Filter	Version 3.0.3
Surfcontrol Superscout Web Filter	Version 3.0
Surfcontrol Web Filter	Version 4.0
Surfcontrol Web Filter	Version 4.1