PT-2001-1964 · Igss · Air Messenger Lan Server

Publicado 2001-10-12 · Atualizado 2008-09-05 · CVE-2001-0785

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Air Messenger LAN Server version 3.4.2

Description The issue allows remote attackers to read arbitrary files via a .. (dot dot) attack, which is a type of directory traversal attack. This attack takes advantage of the Webpaging interface in the affected software.

Recommendations For Air Messenger LAN Server version 3.4.2, consider restricting access to the Webpaging interface until a patch is available. As a temporary workaround, limit the ability to read arbitrary files by implementing strict file system permissions.

Correção

Identificadores relacionados

CVE-2001-0785

Produtos afetados

Air Messenger Lan Server

Referências · 3

• http://securityfocus.com/bid/2883 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0785 · Nota de Segurança