PatchTheCVEnetrc vulnerabilities and fixes
Recent CVEs affecting netrc, with upgrade or downgrade steps. 4 tracked.
netrc has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2002-12-31. Highest priority: CVE-2002-0066 (score 45/100).
- CVE-2002-1676 LOW 2.1 DOWNGRADE DOWNGRADE BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwor
- CVE-2002-0066 HIGH 7.5 DOWNGRADE DOWNGRADE Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is ins
- CVE-2002-0065 HIGH 7.2 DOWNGRADE DOWNGRADE Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gai
- CVE-2002-0064 HIGH 7.2 DOWNGRADE DOWNGRADE Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.
FAQ
How do I fix netrc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is netrc being exploited right now?
None of the tracked netrc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which netrc CVE should I patch first?
CVE-2002-0066 currently ranks highest (45/100): Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is ins.