PT-1998-1218 · Ray Chan · Ray Chan Www Authorization Gateway

Publicado 1998-07-08 · Atualizado 2016-10-18 · CVE-1999-1436

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ray Chan WWW Authorization Gateway version 0.1

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter. This can be exploited by injecting malicious input into the vulnerable parameter.

Recommendations For Ray Chan WWW Authorization Gateway version 0.1, consider restricting access to the CGI program until a fix is available, and avoid using the user parameter with untrusted input.

Exploit

Correção

Identificadores relacionados

CVE-1999-1436

Produtos afetados

Ray Chan Www Authorization Gateway

Referências · 4

• 🔥 https://exploit-db.com/exploits/19121 · Exploit
• http://securityfocus.com/bid/152 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1436 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=90221104525905&w=2 · Nota