PT-2001-1383 · Microsoft · Internet Explorer+1

CVE-2001-0150 · Publicado 2001-05-07 · Atualizado 2024-02-13

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.5 and earlier

Description: The issue allows remote attackers to execute arbitrary commands if the Internet Explorer client is using the Telnet client provided in Services for Unix (SFU) 2.0. This is because Internet Explorer executes Telnet sessions using command line arguments specified by the web site, and SFU 2.0 creates session transcripts.

Recommendations: For Internet Explorer versions 5.5 and earlier, consider disabling the use of the Telnet client provided in Services for Unix (SFU) 2.0 as a temporary workaround until a patch is available. Restrict access to Telnet sessions to minimize the risk of exploitation.

Exploit

Correção

Argument Injection

Enumeração de Fraquezas

CWE-88

Identificadores relacionados

CVE-2001-0150

Produtos afetados

Internet Explorer

Services For Unix

Referências · 8

• 🔥 https://exploit-db.com/exploits/20680 · Exploit
• http://securityfocus.com/bid/2463 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0150 · Nota de Segurança
• http://osvdb.org/7816 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6230 · Nota
• https://t.me/cvenotify/71277 · Publicação no Telegram
• https://t.me/cvenotify/71276 · Publicação no Telegram
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015 · Aviso do Fabricante