Software602 Web602 Web Server Unauthorized Admin Directory Access Vulnerability

Bugtraq ID:	6006
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 18 2002 12:00AM
Updated:	Oct 18 2002 12:00AM
Credit:	Discovery of this vulnerability credited to Jan Kachlik <[email protected]>.
Vulnerable:	Software602 602Pro LAN SUITE 2002 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home
Not Vulnerable:	Software602 602Pro LAN SUITE 2002 2002.0.2 .0916

Software602 Web602 Web Server Unauthorized Admin Directory Access Vulnerability

An unauthorized access vulnerability has been reported for Web602. Reportedly, Web602 allows access to the '/admin/' folder without any authorization.

An attacker can exploit this vulnerability to obtain access to the admin folder and perform any administrative actions.

Software602 Web602 Web Server Unauthorized Admin Directory Access Vulnerability

References:

• 602Pro LAN SUITE Product Page (Software602)
  
• Czech Homepage (Software602)