PT-2001-2054 · Php Nuke · Network Tools

Publicado 2001-11-16 · Atualizado 2019-07-01 · CVE-2001-0899

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Network Tools version 0.2 for PHP-Nuke

Description The issue allows remote attackers to execute commands on the server. This is achieved by injecting shell metacharacters in the hostinput variable.

Recommendations For Network Tools version 0.2, consider restricting or sanitizing input to the hostinput variable to prevent command execution until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2001-0899

Produtos afetados

Network Tools

Referências · 5

• 🔥 https://exploit-db.com/exploits/21155 · Exploit
• http://phpnukerz.org/modules.php?name=Downloads&d_op=viewsdownload&sid=32 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2001-0899 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7578 · Nota
• http://marc.info/?l=bugtraq&m=100593523104176&w=2 · Nota