PT-2001-1157 · 24Link · 24Link

Publicado 2001-01-09 · Atualizado 2008-09-05 · CVE-2000-1118

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 24Link version 1.06

Description The issue allows remote attackers to bypass access restrictions. This can be achieved by prepending specific strings, such as /+/ or /. , to the HTTP GET request.

Recommendations For version 1.06, consider restricting access to sensitive areas of the web server to minimize the risk of exploitation. As a temporary workaround, avoid using HTTP GET requests that could be manipulated by adding /+/ or /. to the request until a patch is available.

Correção

Identificadores relacionados

CVE-2000-1118

Produtos afetados

24Link

Referências · 2

• http://archives.neohapsis.com/archives/bugtraq/2000-11/0369.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-1118 · Nota de Segurança