PT-2000-1758 · Sambar · Search.Dll Sambar Isapi Search Utility+1

Publicado 2000-11-14 · Atualizado 2010-01-16 · CVE-2000-0835

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sambar Server version 4.4 Beta 3

Description The issue allows remote attackers to read arbitrary directories by specifying the directory in the query parameter of the search.dll Sambar ISAPI Search utility.

Recommendations For Sambar Server version 4.4 Beta 3, consider restricting access to the search.dll Sambar ISAPI Search utility until a patch is available. As a temporary workaround, avoid using the query parameter in the affected API endpoint.

Exploit

Correção

Identificadores relacionados

CVE-2000-0835

Produtos afetados

Sambar Server

Search.Dll Sambar Isapi Search Utility

Referências · 5

• 🔥 https://exploit-db.com/exploits/20223 · Exploit
• 🔥 http://securityfocus.com/bid/1684 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0835 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0835 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2000-09/0175.html · Nota