PT-2000-1706 · Bajie · Bajie Http Web Server

Publicado 2000-10-20 · Atualizado 2008-09-05 · CVE-2000-0774

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bajie HTTP web server version 0.30a

Description The issue concerns a Java servlet named "test" in the Bajie HTTP web server, which discloses the real pathname of the web document root.

Recommendations For Bajie HTTP web server version 0.30a, consider removing or restricting access to the "test" Java servlet to prevent the disclosure of sensitive path information.

Correção

Identificadores relacionados

CVE-2000-0774

Produtos afetados

Bajie Http Web Server

Referências · 3

• http://securityfocus.com/bid/1521 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0774 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html · Aviso do Fabricante