CVE-2002-2170

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-12-31 · updated 2026-06-16

Description

Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request that accesses the dir.hts page on the localhost and adds an entire hard drive to be shared.

Affected products

Working Resources Inc. Badblue: enterprise_1.7, enterprise_1.7.2, enterprise_1.7.3, enterprise_1.7.4

References

http://online.securityfocus.com/archive/1/283418
http://www.iss.net/security_center/static/9642.php
http://www.securityfocus.com/bid/5276
http://online.securityfocus.com/archive/1/283418
http://www.iss.net/security_center/static/9642.php
http://www.securityfocus.com/bid/5276

Get alerted when CVE-2002-2170 or the next vulnerability affects your stack