PT-2001-1149 · Ibm · Ibm Net.Data Db2Www Package
Publicado
2001-01-09
·
Atualizado
2008-09-05
·
CVE-2000-1110
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Net.Data db2www package (affected versions not specified)
Description
The issue allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the document.d2w CGI program.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Ibm Net.Data Db2Www Package