CVE-2002-0202: Paintbbs

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain the encrypted server password via the world-readable oekakibbs.conf file, or (2) modify the server configuration via the world-writeable /oekaki/ folder.

Affected products

• Paintbbs Paintbbs: version 1.2 only

Published 2002-05-16. Last modified 2026-06-16.