PT-2001-2298 · Baltimore Technologies · Websweeper

Publicado 2001-08-12 · Atualizado 2008-09-05 · CVE-2001-1157

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Baltimore Technologies WEBsweeper versions 4.0 through 4.02

Description The issue allows remote attackers to bypass filtering of Javascript from HTML pages. This can be achieved by using an extra leading < and one or more characters before the SCRIPT tag, or by utilizing tags with Unicode.

Recommendations For versions 4.0 through 4.02, consider disabling the processing of Unicode tags and ensure proper filtering of Javascript from HTML pages to mitigate the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-1157

Produtos afetados

Websweeper

Referências · 4

• http://securityfocus.com/bid/3173 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1157 · Nota de Segurança
• http://securityfocus.com/archive/1/203821 · Aviso do Fabricante
• http://securityfocus.com/bid/3172 · Aviso do Fabricante