PT-2000-1820 · Ergo · Browsegate

Publicado 2000-12-19 · Atualizado 2017-10-10 · CVE-2000-0908

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BrowseGate version 2.80

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.

Recommendations For BrowseGate version 2.80, consider restricting the length of Authorization and Referer headers in HTTP requests to prevent potential exploitation. Additionally, as a temporary workaround, restrict access to sensitive areas of the server to minimize the risk of arbitrary command execution until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2000-0908

Produtos afetados

Browsegate

Referências · 7

• 🔥 https://exploit-db.com/exploits/20233 · Exploit
• http://netcplus.com/browsegate.htm#BGLatest · Nota
• http://securityfocus.com/bid/1702 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0128.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5270 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0908 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=96956211605302&w=2 · Nota