PT-2001-1979 · Unknown · Interactive Story

Publicado 2001-12-06 · Atualizado 2017-10-10 · CVE-2001-0804

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Interactive Story version 1.3

Description A directory traversal issue exists, allowing a remote attacker to read arbitrary files. This is achieved through a .. (dot dot) attack on the next parameter in the story.pl file.

Recommendations For Interactive Story version 1.3, consider restricting access to the story.pl file or the next parameter to minimize the risk of exploitation. Avoid using the next parameter in a way that could facilitate a directory traversal attack until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2001-0804

Produtos afetados

Interactive Story

Referências · 8

• 🔥 https://exploit-db.com/exploits/21008 · Exploit
• 🔥 http://securityfocus.com/bid/3028 · Exploit
• 🔥 http://securityfocus.com/archive/1/[e-mail] · Exploit
• http://valeriemates.com/story_download.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6843 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0804 · Nota de Segurança
• http://osvdb.org/683 · Nota
• http://securityfocus.com/archive/1/4.3.2.7.2.20010715184257.00b20100%40compumodel.com · Nota