PT-2001-2473 · Namazu · Namazu

Publicado 2001-11-25 · Atualizado 2016-10-18 · CVE-2001-1350

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Namazu versions 2.0.7 and earlier

Description The issue allows remote attackers to execute arbitrary Javascript as other web users. This is achieved via the lang parameter in the namazu.cgi script.

Recommendations For Namazu versions 2.0.7 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2001-1350

Produtos afetados

Namazu

Referências · 4

• http://search.namazu.org/ml/namazu-devel-ja/msg02114.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1350 · Nota
• http://marc.info/?l=bugtraq&w=2&r=1&s=namazu&q=b · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1350 · Nota de Segurança