PT-2000-1269 · Bizdb · Bizdb

Publicado 2000-04-12 · Atualizado 2008-09-10 · CVE-2000-0287

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BizDB (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary commands by injecting shell metacharacters into the dbname parameter of the bizdb-search.cgi script.

Recommendations For all affected versions, avoid using the dbname parameter in the bizdb-search.cgi script until a fix is available. As a temporary workaround, consider restricting access to the bizdb-search.cgi script to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2000-0287

Produtos afetados

Bizdb

Referências · 4

• 🔥 http://securityfocus.com/bid/1104 · Exploit
• 🔥 https://exploit-db.com/exploits/19844 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2000-04/0058.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0287 · Nota de Segurança