CVE-2002-0107 describes an information leakage vulnerability in the web administration interface of CacheFlow CacheOS versions 4.0.13 and earlier. Remote attackers can exploit this by sending malformed GET requests, causing sensitive information to be disclosed within error messages. This vulnerability has a CVSS score of 5.0 (Medium), indicating it can be exploited remotely with low complexity to achieve partial confidentiality impact. While there is no evidence of active exploitation or Metasploit modules, exploit code is publicly available on ExploitDB, though community discussion and media coverage are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.0CPE matchmatch criteria | cpe:2.3:a:cacheflow:cacheos:0.0:*:*:*:*:*:*:* | ||
3.1.02CPE matchmatch criteria | cpe:2.3:a:cacheflow:cacheos:3.1.02:*:*:*:*:*:*:* | ||
3.1.03CPE matchmatch criteria | cpe:2.3:a:cacheflow:cacheos:3.1.03:*:*:*:*:*:*:* | ||
3.1.04CPE matchmatch criteria | cpe:2.3:a:cacheflow:cacheos:3.1.04:*:*:*:*:*:*:* | ||
3.1.05CPE matchmatch criteria | cpe:2.3:a:cacheflow:cacheos:3.1.05:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.