PT-2001-1461 · News Desk · News Desk

Publicado 2001-03-09 · Atualizado 2008-09-05 · CVE-2001-0232

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions News Desk version 1.2

Description The issue allows remote attackers to read arbitrary files via shell metacharacters in the newsdesk.cgi component.

Recommendations For News Desk version 1.2, consider restricting access to the newsdesk.cgi component until a patch is available. As a temporary workaround, avoid using shell metacharacters in the newsdesk.cgi component to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-0232

Produtos afetados

News Desk

Referências · 2

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-01/0042.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0232 · Nota de Segurança