PT-2000-1705 · Bajie · Bajie Http Web Server

Publicado 2000-10-20 · Atualizado 2017-10-10 · CVE-2000-0773

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bajie HTTP web server version 0.30a

Description The issue allows remote attackers to read arbitrary files via a URL that contains a "....", which is a variant of the dot dot directory traversal attack.

Recommendations For Bajie HTTP web server version 0.30a, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available.

Correção

Identificadores relacionados

CVE-2000-0773

Produtos afetados

Bajie Http Web Server

Referências · 4

• http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0773 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5021 · Nota
• http://securityfocus.com/bid/1522 · Aviso do Fabricante