Skip to content

CVE-2002-0613

dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication...

10.0 HighPublic exploit

CVE-2002-0613 is a high vulnerability (CVSS 10.0) in Dnstools Software Dnstools, published June 18, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.3%, the 95th percentile. No source names a fixed version.

dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.

Exploit likelihood

11.3%Up 7.1 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.

Record: CVE-2002-0613
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.

Record: CVE-2002-0613
Updated: 2026-11-02

EUVDEUVD-2002-0608 No score

dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.

Record: EUVD-2002-0608
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xrrw-gmgc-3q22 No score

dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication...

dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.

Record: GHSA-xrrw-gmgc-3q22
Updated: 2026-11-02

Affected products

dnstools software dnstools

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	DNSTools 2.0 - Authentication Bypass	2002-04-28

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References