CVE-2002-0066

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-04-22 · updated 2026-06-16

Description

Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.

Affected products

Bindview Netrc: 1.0, 3.06
Funk Software Proxy: 3.0, 3.06, 3.09

References

http://razor.bindview.com/publish/advisories/adv_FunkProxy.html
http://www.iss.net/security_center/static/8793.php
http://www.securityfocus.com/bid/4460
http://razor.bindview.com/publish/advisories/adv_FunkProxy.html
http://www.iss.net/security_center/static/8793.php
http://www.securityfocus.com/bid/4460

Get alerted when CVE-2002-0066 or the next vulnerability affects your stack