PT-2001-2339 · Unknown · Last Lines

Publicado 2001-12-30 · Atualizado 2016-10-18 · CVE-2001-1205

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Last Lines version 2.0

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by utilizing '..' sequences in the error log variable.

Recommendations For Last Lines version 2.0, consider restricting access to the lastlines.cgi script until a patch is available, or avoid using the error log variable in a way that could facilitate directory traversal attacks.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2001-1205

Produtos afetados

Last Lines

Referências · 3

• http://securityfocus.com/bid/3754 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1205 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=100975978324723&w=2 · Nota