PT-2000-1343 · Pdgsoft · Pdgsoft Shopping Cart

Publicado 2000-05-01 · Atualizado 2016-10-18 · CVE-2000-0401

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PDGSoft shopping cart (affected versions not specified)

Description The issue concerns buffer overflows in the redirect.exe and changepw.exe components. Remote attackers can exploit this to execute arbitrary commands by sending a long query string.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2000-0401

Produtos afetados

Pdgsoft Shopping Cart

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2000-0401 · Nota de Segurança
• http://pdgsoft.com/Security/security2.html · Nota
• http://marc.info/?l=bugtraq&m=95928319715983&w=2 · Nota
• http://marc.info/?l=ntbugtraq&m=95928667119963&w=2 · Nota
• http://securityfocus.com/bid/1256 · Nota