PT-2001-1369 · Unknown · Ultraboard 2000

Publicado 2001-02-14 · Atualizado 2016-10-18 · CVE-2001-0135

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Ultraboard 2000 version 2.11

Description: The default installation of Ultraboard 2000 creates certain directories with world-writeable permissions. This could allow local users to modify sensitive information or possibly insert and execute CGI programs.

Recommendations: For Ultraboard 2000 version 2.11, change the permissions of the Skins, Database, and Backups directories to prevent world-writeable access, restricting modifications to authorized users only.

Correção

Identificadores relacionados

CVE-2001-0135

Produtos afetados

Ultraboard 2000

Referências · 3

• http://securityfocus.com/bid/2197 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0135 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=97933458505857&w=2 · Nota