CVE-2002-0107

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-03-25 · updated 2026-06-16

Description

Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.

Affected products

Cacheflow Cacheos: 0.0, 3.1.02, 3.1.03, 3.1.04, 3.1.05, 3.1.06 (+17)

References

http://marc.info/?l=bugtraq&m=101052887431488&w=2
http://online.securityfocus.com/archive/1/254167
http://www.iss.net/security_center/static/7835.php
http://www.securityfocus.com/bid/3841
http://marc.info/?l=bugtraq&m=101052887431488&w=2
http://online.securityfocus.com/archive/1/254167
http://www.iss.net/security_center/static/7835.php
http://www.securityfocus.com/bid/3841

Get alerted when CVE-2002-0107 or the next vulnerability affects your stack