PT-2001-2009 · Ikonboard · Ikonboard

Publicado 2001-11-22 · Atualizado 2016-10-18 · CVE-2001-0841

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ikonboard versions prior to ib220

Description A directory traversal issue exists, allowing remote attackers to overwrite files and gain privileges. This is achieved by using .. (dot dot) sequences in the amembernamecookie cookie.

Recommendations For versions prior to ib220, update to a version later than ib220 to resolve the issue. As a temporary workaround, consider restricting access to the Search.cgi script until a patch is available. Avoid using the amembernamecookie cookie in the affected Search.cgi script until the issue is resolved.

Correção

Identificadores relacionados

CVE-2001-0841

Produtos afetados

Ikonboard

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-0841 · Nota de Segurança
• http://securityfocus.com/bid/3486 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0841 · Nota
• http://iss.net/security_center/static/7433.php · Nota
• http://marc.info/?l=bugtraq&m=100446445208739&w=2 · Nota