CVE-2002-0066

CVE-2002-0066 describes an authentication bypass vulnerability in Funk Software Proxy Host 3.x before 3.09A, affecting products like bindview funk_software_proxy and funk_software netrc. The vulnerability stems from an insecurely configured Named Pipe, allowing local and potentially remote attackers to access configuration utilities and escalate privileges. With a CVSS score of 7.5 (HIGH), it presents a significant risk due to its network-based attack vector, low complexity, and potential for partial confidentiality, integrity, and availability impact. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the CVE has garnered considerable community discussion, indicating awareness among security researchers.