CVE-2002-0736

Published: Aug 12, 2002Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.

Affected (2)

Products: Microsoft: Backoffice

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Backoffice	Version 4.0
Microsoft Backoffice	Version 4.5

References (8)

http://archives.neohapsis.com/archives/bugtraq/2002-04/0208.html

Source: cve@mitre.org

http://support.microsoft.com/support/kb/articles/q316/8/38.asp

Source: cve@mitre.org

PatchVendor Advisory

http://www.iss.net/security_center/static/8862.php

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/4528

Source: cve@mitre.org

PatchVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2002-04/0208.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.microsoft.com/support/kb/articles/q316/8/38.asp

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.iss.net/security_center/static/8862.php

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/4528

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.